Static task
static1
Behavioral task
behavioral1
Sample
0fd1106af0b985ea7293672c9d0d900b2f32fb93645b6be04b3fc1e2521323be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0fd1106af0b985ea7293672c9d0d900b2f32fb93645b6be04b3fc1e2521323be.exe
Resource
win10v2004-20220812-en
General
-
Target
0fd1106af0b985ea7293672c9d0d900b2f32fb93645b6be04b3fc1e2521323be
-
Size
510KB
-
MD5
451c01146bf6d0075d41ee9034f2059a
-
SHA1
54644c8488c37287e2e897c444a74e55f405ee22
-
SHA256
0fd1106af0b985ea7293672c9d0d900b2f32fb93645b6be04b3fc1e2521323be
-
SHA512
c6cc772ed60a6840f0a8caf89356bcc52997ae3979c471ccc9af0476a7fb2a7bc859b08389a55f43418e77d7d46fd2c95fc6fef8655940a5ab319170599b5570
-
SSDEEP
6144:dI2rNtaGLNmToZ5xDbhjK+EWeioSdV9PkI+ynKCgGm0Emn7M96Jqu+FrnTdA2wT:dI2RtPYTA5xhIdXcVRiBA7M9zrT3
Malware Config
Signatures
Files
-
0fd1106af0b985ea7293672c9d0d900b2f32fb93645b6be04b3fc1e2521323be.exe windows x86
a79c68083f7258ee6bd24bdd8a2ae7fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
CreateMutexW
GetNativeSystemInfo
lstrlenA
CopyFileExW
CommConfigDialogA
WriteConsoleOutputCharacterA
GetCommState
SetDefaultCommConfigW
GetSystemWindowsDirectoryW
SetEnvironmentVariableW
CancelWaitableTimer
GetModuleHandleW
GetConsoleAliasesA
GetWindowsDirectoryA
WriteFile
CreateActCtxW
GlobalAlloc
LoadLibraryW
GetSystemPowerStatus
GetCalendarInfoW
GetStringTypeExW
GetVolumePathNamesForVolumeNameW
GetGeoInfoA
lstrcatA
GetLastError
SetLastError
GetProcessHeaps
VirtualAlloc
ResetEvent
HeapLock
GetModuleFileNameA
GetModuleHandleA
CreateMailslotA
OpenEventW
WriteConsoleOutputAttribute
DuplicateHandle
ReleaseMutex
FindAtomW
QueryDepthSList
GetSystemTime
LCMapStringW
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
ExitProcess
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
HeapAlloc
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
GetStdHandle
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetTimeFormatA
GetDateFormatA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetLocaleInfoW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 450KB - Virtual size: 450KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 66.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dinuvi Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ