Static task
static1
Behavioral task
behavioral1
Sample
897ae6e12c0cb2beedbfa4e54e32bb97c0f881f2fb18aad6fb08f6aeb3097f15.exe
Resource
win7-20220812-en
General
-
Target
897ae6e12c0cb2beedbfa4e54e32bb97c0f881f2fb18aad6fb08f6aeb3097f15
-
Size
1.7MB
-
MD5
8cfa1da0104d3f7a83d30cd97e53b2f2
-
SHA1
968fecb371720afca1bd528287ca83407129cfc7
-
SHA256
897ae6e12c0cb2beedbfa4e54e32bb97c0f881f2fb18aad6fb08f6aeb3097f15
-
SHA512
e914253b96c46ecb36e212d4bbe50d2614c5ccb29f5274a63bf063833e9616c813c75e5d484ea674e330ff445e6d51dc0cbbdff021a21b982a72dfc69be66356
-
SSDEEP
49152:Hk9nNXRsNXEmVuu7MACN6hicTWAkTjlO6r4GK53zJ:IBspku7MXNOiIWAaJD0GeJ
Malware Config
Signatures
Files
-
897ae6e12c0cb2beedbfa4e54e32bb97c0f881f2fb18aad6fb08f6aeb3097f15.exe windows x86
cf5c5636542bd2b0628b38af05631df4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
PulseEvent
SetCurrentConsoleFontEx
GetProfileIntW
EndUpdateResourceW
ZombifyActCtx
GetProfileSectionA
ReleaseSRWLockExclusive
GetSystemDefaultLCID
ClearCommBreak
GlobalAlloc
Sleep
GetProcessHandleCount
CreateFileW
GetBinaryTypeW
ReleaseSemaphore
FreeLibraryAndExitThread
GetLastError
GetProcAddress
FindClose
OpenThread
MoveFileA
SetCurrentDirectoryW
FindNextChangeNotification
GlobalGetAtomNameW
GetModuleHandleA
EraseTape
GetConsoleTitleW
BuildCommDCBA
EnumDateFormatsW
ReadConsoleInputW
CommConfigDialogW
HeapSize
WriteConsoleW
GetCommandLineW
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WriteFile
GetModuleFileNameW
GetProcessHeap
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
HeapFree
WideCharToMultiByte
GetStringTypeW
RaiseException
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
RtlUnwind
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapAlloc
HeapReAlloc
LCMapStringEx
SetFilePointerEx
CloseHandle
user32
MessageBoxW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ