Static task
static1
Behavioral task
behavioral1
Sample
fdd5a37e217246392a4367907cd00bb95e83274cc44df045a0d29046df4240ec.exe
Resource
win7-20220718-en
General
-
Target
fdd5a37e217246392a4367907cd00bb95e83274cc44df045a0d29046df4240ec
-
Size
271KB
-
MD5
54a2e012c33b48d1f4b1d68cb42b5d97
-
SHA1
127e4d42b34241fe9d4188a865c7597d8de40372
-
SHA256
8cef687b60ca05fde9a6a17ed3095da23652966e92a9903f163b23e15fb1308a
-
SHA512
16599fb5b9252019c4eed7d326f959ba06718f39438eef427530ae79c2f3de30b0fc493c95361b5fe813e58fb6c9abf48720c3e125cbaf67c97a6a3dc58031bf
-
SSDEEP
6144:uz12qYDq/oxlFfUY5WaVtOqrzP+7oiFffijTjpAF+q7dsZN:BqYDqA0wLK7qfjNq7mT
Malware Config
Signatures
Files
-
fdd5a37e217246392a4367907cd00bb95e83274cc44df045a0d29046df4240ec.zip
-
fdd5a37e217246392a4367907cd00bb95e83274cc44df045a0d29046df4240ec.exe windows x86
17d894006bd909847ec5f7cd1793aa2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FoldStringA
InterlockedDecrement
_hread
CancelWaitableTimer
WaitNamedPipeW
BuildCommDCBW
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryW
EnumResourceTypesA
TransmitCommChar
GetFirmwareEnvironmentVariableW
BeginUpdateResourceA
WriteConsoleW
DeleteFileA
GetProcAddress
GetUserDefaultLCID
GetConsoleAliasW
FindFirstChangeNotificationA
RemoveDirectoryA
GetCalendarInfoW
FindFirstFileExW
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
SetConsoleTitleW
GetBinaryTypeW
GlobalAlloc
FindNextFileA
OpenJobObjectA
HeapFree
_lclose
GetComputerNameA
TlsSetValue
SetCalendarInfoW
SetComputerNameA
LoadLibraryA
FoldStringW
GetDiskFreeSpaceW
GetSystemDefaultLangID
SetThreadLocale
FillConsoleOutputCharacterA
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
HeapAlloc
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
CreateFileW
gdi32
GetCharWidth32A
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 32.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ