Static task
static1
Behavioral task
behavioral1
Sample
f65ba83c6db3672614119dca0ea2b948100f2d984e642c674a84d9d3498481cf.exe
Resource
win7-20220812-en
General
-
Target
f65ba83c6db3672614119dca0ea2b948100f2d984e642c674a84d9d3498481cf
-
Size
180KB
-
MD5
6b4c224c16e852bdc7ed2001597cde9d
-
SHA1
70517a53551269d68b969a9328842cea2e1f975c
-
SHA256
f65ba83c6db3672614119dca0ea2b948100f2d984e642c674a84d9d3498481cf
-
SHA512
a383bc2ffbacd2f1b9b7863e8ea41ba83873edc2e2c42b74e180767e42cc2dd711109c657ab7b602492ad3962e89fb09c588efc564acae03303143b241b6dcf5
-
SSDEEP
3072:yscjOeJv94aM0WRtmJQd/osAyP9OHDxqTq2Mia0ZNfo+CnkuRux43v0VrO095TGn:ysVeB943AfykD67MitZt0ux4f0VrOBu8
Malware Config
Signatures
Files
-
f65ba83c6db3672614119dca0ea2b948100f2d984e642c674a84d9d3498481cf.exe windows x86
511053e45a1ea09e3a5f640581bd0a50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiW
DecodePointer
lstrcatW
GetComputerNameA
CloseHandle
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
ReadFile
SetEndOfFile
CreateFileW
GetFileType
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
SetFilePointerEx
GetConsoleMode
ReadConsoleW
CompareStringW
LCMapStringW
DeleteFileW
GetConsoleCP
GetFileSizeEx
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
HeapSize
WriteConsoleW
VirtualQuery
advapi32
GetUserNameA
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ