Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220812-en
General
-
Target
file
-
Size
130KB
-
MD5
f49ac08e35e9dfd51af32fc9ccbeac56
-
SHA1
76675937dd9d22f39be13a82c55f78f11b137a56
-
SHA256
1b42ae4ee479590709b22c88fc7e51f6bc1e87dfab3a1d0ea058dae21c494dae
-
SHA512
f2ce1a6fd0a24a920045ae695fab67e71c526e58fb004240456264ba4e74db6e0c0c80612ed9db957f94d71bad726c07d5b626879dbe6c18fe17da6d890d3ef3
-
SSDEEP
3072:K1ZrXW7JLzhKy6cpfY5sIDwa1Y/JsI9Ci1ovTB6Bf:MXW7J3YcG5o+Y/JJoir
Malware Config
Signatures
Files
-
file.exe windows x86
e22863cb63d0224cd72541b016319876
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
InterlockedIncrement
SetWaitableTimer
WaitNamedPipeA
BuildCommDCBW
GetSystemTimeAdjustment
ReadConsoleInputA
CreateFileW
SearchPathA
EnumResourceTypesW
GetCPInfoExA
ExpandEnvironmentStringsW
GetModuleFileNameW
BeginUpdateResourceW
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterA
WriteConsoleW
DeleteFileW
LocalAlloc
GetProcAddress
GetModuleHandleW
AddRefActCtx
GetConsoleAliasA
GetSystemWindowsDirectoryW
FindFirstChangeNotificationA
GlobalAddAtomA
WritePrivateProfileStringW
EnumResourceNamesA
SearchPathW
lstrcpynA
FindFirstFileExA
GetVolumeInformationA
GetCurrentDirectoryA
GetConsoleAliasesLengthW
AllocConsole
GetConsoleTitleW
SetCommMask
SetPriorityClass
OpenJobObjectW
_lclose
CreateDirectoryExW
FillConsoleOutputCharacterW
HeapReAlloc
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent
advapi32
BackupEventLogW
CloseEventLog
DeregisterEventSource
BackupEventLogA
GetNumberOfEventLogRecords
GetEventLogInformation
winhttp
WinHttpOpen
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ