Static task
static1
Behavioral task
behavioral1
Sample
72ca6d6179572214160da9198d4dd496.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
72ca6d6179572214160da9198d4dd496.exe
Resource
win10v2004-20220722-en
General
-
Target
72ca6d6179572214160da9198d4dd496.exe
-
Size
181KB
-
MD5
72ca6d6179572214160da9198d4dd496
-
SHA1
fbcd2b16d346c156f6083b0367b751df0a8d6503
-
SHA256
5a3d6d5164f3d0a89f158b542c683752ba6071799d1b375d0b74a643c2cf7618
-
SHA512
8930448f089d464a52c1a84c817112b45bfd895790c32f33b2f56e4e57b8b5ebb30533422e5bd3e8db9a7d8a3ce6e42f2cb0ae464c55dfd6c57bbdee3a74f0c9
-
SSDEEP
3072:2YCYERsUNdM7FUSkqwICGcieDdIkQ0fE5BrvJPFya/bd/wyCGxqWoVim4eY:2YNlUA7mSkFKe5IJ0furjya/bZhqLO
Malware Config
Signatures
Files
-
72ca6d6179572214160da9198d4dd496.exe.exe windows x86
7b8da7d62de49809359b378ca66a56f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
GetSystemTime
GetLocalTime
InterlockedDecrement
GetLocaleInfoW
InterlockedCompareExchange
_hwrite
SetWaitableTimer
GetSystemDirectoryA
CreateEventW
ReadConsoleA
VerifyVersionInfoA
BuildCommDCBA
GetConsoleAliasExesLengthA
SetSystemTimeAdjustment
PeekConsoleInputA
EnumDateFormatsA
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryA
WaitNamedPipeA
GetEnvironmentStrings
FindResourceExA
VirtualFree
GetFirmwareEnvironmentVariableW
GetModuleFileNameW
BeginUpdateResourceW
EnumCalendarInfoExW
WriteConsoleOutputCharacterW
WriteConsoleA
LoadLibraryW
DeleteFileW
LocalAlloc
GetProcAddress
GetUserDefaultLCID
FindFirstChangeNotificationW
HeapUnlock
GetCalendarInfoW
SetConsoleTitleA
GetBinaryTypeW
GetComputerNameExA
FindNextFileA
OpenJobObjectA
HeapValidate
_lclose
GetComputerNameW
SetFileShortNameW
TlsSetValue
SetCalendarInfoW
SetComputerNameW
CreateDirectoryExA
DeleteCriticalSection
FindFirstChangeNotificationA
GetVolumePathNameW
GetProcessHandleCount
GetCurrentProcess
GetThreadLocale
GetSystemDefaultLCID
ReadFile
GetStringTypeW
HeapSize
GetDiskFreeSpaceA
RaiseException
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
LCMapStringW
WriteConsoleW
HeapReAlloc
CreateFileW
user32
ClientToScreen
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ