Static task
static1
Behavioral task
behavioral1
Sample
2683EFFD646ED98B0E307114C8850A93EE12E497285BB.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2683EFFD646ED98B0E307114C8850A93EE12E497285BB.exe
Resource
win10v2004-20220901-en
General
-
Target
2683EFFD646ED98B0E307114C8850A93EE12E497285BB.exe
-
Size
292KB
-
MD5
3be6635389f7e10a61bc55bb43ae7407
-
SHA1
904f092cd8436e3d933dea93a5008ad60cc11e71
-
SHA256
2683effd646ed98b0e307114c8850a93ee12e497285bb6acf1307d4b7edddf9c
-
SHA512
7ee569e4b289f7ad5de5b21e95cdeca4202cf6e9bb1a99b35cc06568556c639d24165eeba87f5467f43c98bb73e30ad6560f03cd2a8275c45ca937902a640a60
-
SSDEEP
6144:M7LJOX4KRlDd/49YNZmdqKtqC8p1Wf5gA:4arbDN49Y4qIiCfa
Malware Config
Signatures
Files
-
2683EFFD646ED98B0E307114C8850A93EE12E497285BB.exe.exe windows x86
240225937a391ad8cef6dcd35791118e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterW
LocalSize
WriteConsoleInputA
EnumDateFormatsA
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameA
VerifyVersionInfoA
VirtualLock
SetVolumeLabelW
LockFile
GetProfileSectionW
RequestWakeupLatency
GetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileA
FindNextVolumeMountPointA
TlsSetValue
LoadResource
GetConsoleTitleA
GetComputerNameExW
OpenEventA
CallNamedPipeW
GetModuleHandleA
GetSystemDirectoryW
GetDriveTypeA
BuildCommDCBAndTimeoutsW
GetShortPathNameW
ReleaseActCtx
GetCommandLineW
InterlockedExchange
CopyFileW
CreateActCtxW
FormatMessageW
EnterCriticalSection
FindNextVolumeA
GetExitCodeThread
LoadLibraryA
CreateNamedPipeA
GetSystemDefaultLCID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomW
InterlockedDecrement
VerifyVersionInfoW
HeapFree
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotW
GetCPInfoExA
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntA
GetConsoleAliasExesLengthW
WaitForDebugEvent
EndUpdateResourceA
SetLastError
ExitThread
GetACP
GetDiskFreeSpaceExW
DefineDosDeviceW
TerminateProcess
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
CreateIoCompletionPort
lstrcpynW
WriteConsoleA
GetProcAddress
lstrcatA
ReadConsoleOutputA
SetCriticalSectionSpinCount
GetComputerNameW
EnumSystemLocalesA
WritePrivateProfileSectionA
WritePrivateProfileStructW
GetPrivateProfileSectionNamesW
FileTimeToSystemTime
GlobalMemoryStatus
SetTapeParameters
lstrcmpW
SetEvent
MoveFileA
FreeLibrary
GetCommState
InterlockedCompareExchange
GetConsoleFontSize
GetOverlappedResult
LocalAlloc
SetThreadPriorityBoost
SetFileShortNameW
lstrcpyA
HeapQueryInformation
GetFileAttributesA
SetCalendarInfoA
GetConsoleTitleW
SetComputerNameW
GetConsoleAliasesA
EnumDateFormatsExW
SetTimeZoneInformation
GetConsoleOutputCP
GetStdHandle
GetLocalTime
GetStringTypeW
FindActCtxSectionStringA
FreeEnvironmentStringsA
GetModuleHandleExW
LoadLibraryW
GetBinaryTypeA
DeleteFiber
GetSystemWindowsDirectoryA
SetFileTime
GetFileSize
GetNamedPipeHandleStateA
UnhandledExceptionFilter
GetProcessShutdownParameters
lstrcpynA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeA
GetFullPathNameA
ReadConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectA
CreateFileW
DeleteTimerQueueTimer
SetCurrentDirectoryW
FlushFileBuffers
SetInformationJobObject
GetNamedPipeHandleStateW
CloseHandle
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
GetStringTypeA
LCMapStringA
LCMapStringW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileA
user32
GetMenuInfo
LoadMenuW
CharUpperW
gdi32
SelectObject
winhttp
WinHttpQueryOption
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ