Static task
static1
Behavioral task
behavioral1
Sample
d9cd94b48ccedbd006ec0c6c3d24f0fe18fa60d7a20f9.exe
Resource
win7-20220718-en
General
-
Target
d9cd94b48ccedbd006ec0c6c3d24f0fe18fa60d7a20f9.exe
-
Size
172KB
-
MD5
9f48a667f96c0cd55c6f6acd68976563
-
SHA1
87622ba459b912a040a3919cf5e4d4c6af7ff8dc
-
SHA256
d9cd94b48ccedbd006ec0c6c3d24f0fe18fa60d7a20f90408acbc3617d37126b
-
SHA512
1d804bcb07119118fed8a66a262dadab876ce5f09bc6d461159953d8edfe2da8659ec1fe0cfe7f112f17dba91cc7bb90863d66175be3df2841e098f4f75bb1ca
-
SSDEEP
3072:02g2ZW/HNmPagkh3DDptrONvMDn4lPdKvqVpB/Jmtk9cuvI:x8vCehzDnrDudKva/cic
Malware Config
Signatures
Files
-
d9cd94b48ccedbd006ec0c6c3d24f0fe18fa60d7a20f9.exe.exe windows x86
f223df6ba3d23a8392f7d42fced67683
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetLocalTime
InterlockedDecrement
GetLocaleInfoA
InterlockedCompareExchange
_hwrite
SetWaitableTimer
GetSystemDirectoryA
CreateEventA
ReadConsoleA
BuildCommDCBA
GetConsoleAliasExesLengthA
HeapWalk
PeekConsoleInputA
EnumDateFormatsW
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryW
VerifyVersionInfoW
WaitNamedPipeA
CreateMutexA
FindResourceExA
VirtualAlloc
GetFirmwareEnvironmentVariableA
BeginUpdateResourceW
EnumCalendarInfoExA
WriteConsoleOutputCharacterW
WriteConsoleW
DeleteFileW
GetProcAddress
GetUserDefaultLangID
FindFirstChangeNotificationW
GetCalendarInfoW
SetConsoleTitleW
GetBinaryTypeA
VirtualProtect
GetSystemDefaultLCID
GetCurrentProcess
GetThreadLocale
GetComputerNameExA
FindNextFileA
OpenJobObjectW
HeapValidate
_lclose
FoldStringW
GetComputerNameW
SetFileShortNameW
FillConsoleOutputCharacterW
GetTimeZoneInformation
TlsGetValue
GetCPInfoExW
GetFileAttributesExA
SetCalendarInfoA
SetComputerNameW
GetFileAttributesW
CreateDirectoryExA
DeleteCriticalSection
GetVolumePathNameA
LoadLibraryA
SetSystemTime
WriteFile
GetStringTypeA
HeapSize
GetDiskFreeSpaceA
CreateFileW
LocalAlloc
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
GetLastError
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
HeapFree
GetModuleHandleW
ExitProcess
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapAlloc
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
ReadFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
RtlUnwind
LCMapStringW
GetStringTypeW
RaiseException
HeapReAlloc
CloseHandle
user32
ClientToScreen
gdi32
GetBitmapBits
advapi32
BackupEventLogA
winhttp
WinHttpReadData
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 32.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ