Static task
static1
Behavioral task
behavioral1
Sample
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
Resource
win10v2004-20220812-en
General
-
Target
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
-
Size
271KB
-
MD5
03d17f9ea0f36fa87428df7b4f7bb460
-
SHA1
e72ee5ee0b22b41067d6bd5d88d7c5f3262d1c47
-
SHA256
cc3567925087862fe31353fef36f7db39be041cdc5828f18cfb694eca6941515
-
SHA512
deee4bddde32ae19348b948087b17e461786a6c7a269c744046adf220221f02732ff8d9a998787446346896a4560afaec3c70643db0060150a2279e92857d261
-
SSDEEP
6144:pFzl6rVnljQ3h02N6DEn9aogOr0hwZf92TVGK2bOEpGImI:ds1lU3wDEn9aQr0hwZYTcTbOEpGlI
Malware Config
Signatures
Files
-
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.zip
-
1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe windows x86
17d894006bd909847ec5f7cd1793aa2b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FoldStringA
InterlockedDecrement
_hread
CancelWaitableTimer
WaitNamedPipeW
BuildCommDCBW
GetConsoleAliasExesLengthW
PeekConsoleInputA
CreateFileA
RegisterWaitForSingleObjectEx
LoadLibraryW
EnumResourceTypesA
TransmitCommChar
GetFirmwareEnvironmentVariableW
BeginUpdateResourceA
WriteConsoleW
DeleteFileA
GetProcAddress
GetUserDefaultLCID
GetConsoleAliasW
FindFirstChangeNotificationA
RemoveDirectoryA
GetCalendarInfoW
FindFirstFileExW
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
SetConsoleTitleW
GetBinaryTypeW
GlobalAlloc
FindNextFileA
OpenJobObjectA
HeapFree
_lclose
GetComputerNameA
TlsSetValue
SetCalendarInfoW
SetComputerNameA
LoadLibraryA
FoldStringW
GetDiskFreeSpaceW
GetSystemDefaultLangID
SetThreadLocale
FillConsoleOutputCharacterA
RtlUnwind
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
WideCharToMultiByte
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
SetStdHandle
FlushFileBuffers
HeapAlloc
HeapReAlloc
SetEndOfFile
GetProcessHeap
ReadFile
HeapSize
CreateFileW
gdi32
GetCharWidth32A
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 32.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ