Static task
static1
Behavioral task
behavioral1
Sample
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
Resource
win10v2004-20220812-en
General
-
Target
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
Size
271KB
-
MD5
3da910f4f25e056a9a01b7b2d5aa5aa0
-
SHA1
ab205dcb33987681a6f8bf4c136ce8cd48d1904f
-
SHA256
0e37f1ca54afc85e0567b0e935ab8f0dda198ff61eb4ed4829e9f996c4670fe0
-
SHA512
b0416b17916c560849b6702e0494e53c1f6ca4051b127152edcfa3bcfd85ece1cde6bd1eb6571940b48d2eaebea03dcc1bbc697383295703531ff910c250b75c
-
SSDEEP
6144:cFzl6rVnljQ3h02N6DEn9aogOr0hwZf92TVGK2bOEpGIml:ss1lU3wDEn9aQr0hwZYTcTbOEpGll
Malware Config
Signatures
Files
-
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.zip
-
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe windows x86
17d894006bd909847ec5f7cd1793aa2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FoldStringA
InterlockedDecrement
_hread
CancelWaitableTimer
WaitNamedPipeW
BuildCommDCBW
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryW
EnumResourceTypesA
TransmitCommChar
GetFirmwareEnvironmentVariableW
BeginUpdateResourceA
WriteConsoleW
DeleteFileA
GetProcAddress
GetUserDefaultLCID
GetConsoleAliasW
FindFirstChangeNotificationA
RemoveDirectoryA
GetCalendarInfoW
FindFirstFileExW
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
SetConsoleTitleW
GetBinaryTypeW
GlobalAlloc
FindNextFileA
OpenJobObjectA
HeapFree
_lclose
GetComputerNameA
TlsSetValue
SetCalendarInfoW
SetComputerNameA
LoadLibraryA
FoldStringW
GetDiskFreeSpaceW
GetSystemDefaultLangID
SetThreadLocale
FillConsoleOutputCharacterA
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
HeapAlloc
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
CreateFileW
gdi32
GetCharWidth32A
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 32.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ