Static task
static1
Behavioral task
behavioral1
Sample
b760b4d4c193c749e94b0b4f3a302e3ad85f93a684ab849ca05691fcc2c011e8.exe
Resource
win10-20220812-en
General
-
Target
b760b4d4c193c749e94b0b4f3a302e3ad85f93a684ab849ca05691fcc2c011e8
-
Size
183KB
-
MD5
db39b00a85513a16af4b6d28c911ea67
-
SHA1
49b5e45bcd1e2cae77c08ab8f4af290d7277bfee
-
SHA256
b760b4d4c193c749e94b0b4f3a302e3ad85f93a684ab849ca05691fcc2c011e8
-
SHA512
7f12f092ff9787b8cec23b025128b1944af2caa587aa89187b0714898c9134ef0442a8dfdd8526ece5b97c5ae4f1cdd4ea556bb3159c19b4608401e12990102c
-
SSDEEP
3072:XVrXpTdgWQkBKxdjNW1Mk13570ldHz64Nf4hdV6HM1sxkgaBChgpZa9uD6Vdyhkf:BXVdgcudp4BJkGeCKigaLwVf
Malware Config
Signatures
Files
-
b760b4d4c193c749e94b0b4f3a302e3ad85f93a684ab849ca05691fcc2c011e8.exe windows x86
e10eabd109796663b2b8fe47960ce479
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringA
InterlockedIncrement
SetWaitableTimer
WaitNamedPipeA
BuildCommDCBW
GetSystemTimeAdjustment
ReadConsoleInputA
CreateFileW
SearchPathA
EnumResourceTypesA
GetCPInfoExW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetConsoleAliasExesLengthA
WriteConsoleOutputCharacterW
WriteConsoleW
DeleteFileW
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
AddRefActCtx
GetConsoleAliasW
FindFirstChangeNotificationA
lstrcpynW
FindFirstFileExA
GetVolumeInformationW
GetCurrentDirectoryA
GetConsoleAliasesLengthW
AllocConsole
GetConsoleTitleW
SetPriorityClass
OpenJobObjectA
_lclose
CreateDirectoryExW
BeginUpdateResourceA
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LoadLibraryW
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
HeapSize
gdi32
GetFontUnicodeRanges
advapi32
BackupEventLogW
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ