Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
General
-
Target
tmp
-
Size
306KB
-
MD5
daf1b117f0d6b8ba73ec51301e68547d
-
SHA1
911e999492fb921a9f93ec5df4a66acaf9ec541b
-
SHA256
5abb2031bbb30a92cd35174c319198e6122de6e63e5b85db51b9f05f28393104
-
SHA512
7d8c5cd34bb643a4129c2d02d52fa76027eeb4548f543cf2e49159e88a78d8058f3f75096b1801958b0fbdb9f879a3d98bc190ca75c1338dcbecfe3eb831cd15
-
SSDEEP
6144:aWUjdIVCHNMcFt+mWBDR6JLVchxSi9MC5sJec/9Sh:jUdHNpFt+mw4JehxNT5i
Malware Config
Signatures
Files
-
tmp.exe windows x86
234a91be37beb31eb0bd4c72753f9b3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsA
FindNextFileW
CopyFileExA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
GetLogicalDrives
GetProfileSectionW
VerifyVersionInfoA
QueryDosDeviceW
OpenThread
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenW
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
WriteConsoleInputA
FindResourceW
GetComputerNameExW
OpenEventA
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryA
GetCurrentDirectoryA
BuildCommDCBAndTimeoutsW
GetProcAddress
GetModuleHandleA
FreeLibraryAndExitThread
OpenMutexW
FileTimeToLocalFileTime
SearchPathW
GetComputerNameExA
LockFile
CreateMutexW
FormatMessageW
GetConsoleScreenBufferInfo
VirtualAlloc
SetMailslotInfo
UnlockFile
GetDiskFreeSpaceExA
GlobalGetAtomNameA
WriteConsoleW
GetCommandLineA
CreateJobObjectW
InitializeCriticalSection
GetNumberOfConsoleMouseButtons
FindNextVolumeW
GetOverlappedResult
GetThreadSelectorEntry
LoadLibraryW
WriteProfileSectionA
AddAtomW
InterlockedIncrement
VerifyVersionInfoW
HeapSize
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotA
WideCharToMultiByte
GetSystemWow64DirectoryW
GetConsoleAliasExesLengthW
WaitForDebugEvent
SetLastError
LoadLibraryA
GetLastError
FoldStringW
GetDefaultCommConfigW
GetConsoleAliasesLengthA
lstrcpyA
LocalAlloc
EnumCalendarInfoExW
EnumDateFormatsExW
ActivateActCtx
GetFileSize
EnumCalendarInfoExA
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameA
GetComputerNameW
ReadConsoleInputA
GetPrivateProfileStructW
_hwrite
GetConsoleAliasW
SetWaitableTimer
GetFullPathNameW
DebugSetProcessKillOnExit
SetCurrentDirectoryA
SetCalendarInfoW
CreateFileA
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
user32
GetCursorInfo
LoadMenuW
CharUpperW
GetListBoxInfo
GetMenuInfo
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ