Static task
static1
Behavioral task
behavioral1
Sample
A04240C397EC7F796157C4EB03A4D2755B0AFEA502528.exe
Resource
win7-20220812-en
General
-
Target
A04240C397EC7F796157C4EB03A4D2755B0AFEA502528.exe
-
Size
261KB
-
MD5
a1f6801d37a93f3a521bb010446d67f3
-
SHA1
b20e4e0ca94255e8c4898fe0264c386199d31aa2
-
SHA256
a04240c397ec7f796157c4eb03a4d2755b0afea5025280f7a2cf997da9814a09
-
SHA512
276aefa81f22bff4acea9f708e18973fe66aa358236bd46300c7742aeef506e2427e6f55939be2604fcf6ad79ad48683e71d14704d54775459763c66e8ea3cb0
-
SSDEEP
6144:qh9Y9MOjGLIypiD887qZ3rEn73tbFBeg3GZS:qh9Y95STpiD887ArEntFYg3G
Malware Config
Signatures
Files
-
A04240C397EC7F796157C4EB03A4D2755B0AFEA502528.exe.exe windows x86
4607ec67423792fa764c28963d304598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
InterlockedIncrement
GetLocaleInfoA
InterlockedCompareExchange
_hread
SetWaitableTimer
GetSystemDirectoryW
CreateEventA
ReadConsoleA
BuildCommDCBA
AddConsoleAliasW
HeapUnlock
PeekConsoleInputA
EnumDateFormatsA
CreateFileW
RegisterWaitForSingleObjectEx
LoadLibraryW
VerifyVersionInfoW
WaitNamedPipeA
CreateMutexA
FindResourceExA
VirtualAlloc
GetFirmwareEnvironmentVariableA
BeginUpdateResourceW
GetConsoleAliasExesLengthA
EnumCalendarInfoExW
WriteConsoleOutputCharacterA
WriteConsoleW
DeleteFileW
GetProcAddress
GetUserDefaultLangID
FindFirstChangeNotificationW
HeapWalk
GetCalendarInfoW
SetFileApisToOEM
SetConsoleTitleW
GetBinaryTypeA
VirtualProtect
GlobalAlloc
GetThreadLocale
GetSystemDefaultLCID
GetProcessHandleCount
GetCommMask
GetCurrentProcess
SetLastError
GetComputerNameExW
FindNextFileA
BuildCommDCBAndTimeoutsW
OpenJobObjectW
HeapValidate
_lopen
FoldStringW
GetComputerNameW
WriteConsoleOutputCharacterW
FillConsoleOutputCharacterW
GetTimeZoneInformation
SetMailslotInfo
GetCPInfoExW
GetFileAttributesExA
SetCalendarInfoA
SetComputerNameW
GetFileAttributesW
CreateDirectoryExA
FindCloseChangeNotification
GetVolumePathNameW
SetSystemTime
MultiByteToWideChar
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
TerminateProcess
GetLastError
SetFilePointer
HeapFree
GetModuleHandleW
ExitProcess
GetCPInfo
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
HeapAlloc
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
SetStdHandle
FlushFileBuffers
LCMapStringW
GetStringTypeW
RaiseException
HeapReAlloc
HeapSize
CloseHandle
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ