Static task
static1
Behavioral task
behavioral1
Sample
2d9d619d30c9c84256dc352d853b279d88ffc014e799af96f73401b31faff1b0.exe
Resource
win7-20220901-en
General
-
Target
2d9d619d30c9c84256dc352d853b279d88ffc014e799af96f73401b31faff1b0
-
Size
375KB
-
MD5
6fcadeff781cc93dea430d79a3d0f1a8
-
SHA1
abeae73eb186022ae0e91c026690dd98bdc7c2a5
-
SHA256
2d9d619d30c9c84256dc352d853b279d88ffc014e799af96f73401b31faff1b0
-
SHA512
dd40fa62ec881619ef150424abbfa04449c685b40582345954976f988b65687b332293ada2c7a6ae8eef0c7ad729fc8150bfafaa6e960f8cc4c8b77b1ef58725
-
SSDEEP
6144:Z2MvwI3a+LQREWDfP1coL97biMWafNd42o7ANaGwZAinpz1r1/2V1b:cMTKEQREWDfP1coL9niufNd0wa3ZAGHw
Malware Config
Signatures
Files
-
2d9d619d30c9c84256dc352d853b279d88ffc014e799af96f73401b31faff1b0.exe windows x86
012f9b1a21b4bda8c635e81dc7284160
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoW
WriteConsoleInputA
EnumDateFormatsA
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
LockFile
GetProfileSectionW
QueryDosDeviceA
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExA
OpenEventW
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryW
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressA
GetCommandLineA
InterlockedExchangeAdd
InterlockedIncrement
SearchPathW
CreateActCtxA
FormatMessageW
GetModuleHandleA
EnterCriticalSection
CreateNamedPipeW
GetSystemDefaultLangID
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomW
InterlockedDecrement
HeapSize
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotA
VerifyVersionInfoA
GetSystemWow64DirectoryW
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
DebugBreak
GetTickCount
GetLastError
LoadLibraryW
VirtualAlloc
GetOEMCP
lstrcpyA
GetMailslotInfo
GetDiskFreeSpaceExW
WriteConsoleA
EnumSystemLocalesA
FileTimeToSystemTime
ResetEvent
LockFileEx
CreateMutexA
FindResourceA
SetCommState
ConvertThreadToFiber
GetConsoleFontSize
LocalAlloc
lstrcpyW
HeapReAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
ReadConsoleInputW
GetComputerNameW
GetPrivateProfileStructA
OpenWaitableTimerW
EnumResourceNamesA
FillConsoleOutputCharacterA
GetFullPathNameA
GetThreadPriority
AddAtomA
MapUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectA
CreateFileW
BuildCommDCBAndTimeoutsW
SetCalendarInfoA
GetFileSizeEx
GetProfileSectionA
GetDefaultCommConfigW
LocalSize
IsDBCSLeadByte
lstrcatA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlUnwind
GetACP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetFilePointer
CloseHandle
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
CreateFileA
user32
CharUpperA
GetCursorInfo
advapi32
ImpersonateNamedPipeClient
AbortSystemShutdownW
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 154KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ