Static task
static1
Behavioral task
behavioral1
Sample
B39FF23CCAE0B2BBFA7AC0E4BE10BC45C543298465CD6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
B39FF23CCAE0B2BBFA7AC0E4BE10BC45C543298465CD6.exe
Resource
win10v2004-20220812-en
General
-
Target
B39FF23CCAE0B2BBFA7AC0E4BE10BC45C543298465CD6.exe
-
Size
824KB
-
MD5
ded5fc7a022a57c7abc81445723eaa84
-
SHA1
679c7f2e69e34b72802680cab9e41bd94038a7e5
-
SHA256
b39ff23ccae0b2bbfa7ac0e4be10bc45c543298465cd6222e13147df7e82c23f
-
SHA512
c96a532a56bb602519061e0fb8a14030e803c67d39e50285ccf5a56bad3ae04c23e5cf32c1a36b4c8013b7e8ab44a876ec3b0f33f769c20af0b89208ccbc392e
-
SSDEEP
12288:sGp2MvHrp79EOxxhb34unZvJ7mcEMGdfnOszp3ruZJvc1P5NVc5XCNGahjkTKNch:b2ErpxxxP3Zv7MOsz14vEFdGaVskcsi
Malware Config
Signatures
Files
-
B39FF23CCAE0B2BBFA7AC0E4BE10BC45C543298465CD6.exe.exe windows x86
2d4e9ffa030315d287b42852cee4e526
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumDateFormatsA
FindNextFileW
CopyFileExA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
GetLogicalDrives
GetProfileSectionW
VerifyVersionInfoA
QueryDosDeviceW
OpenThread
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenW
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
WriteConsoleInputA
FindResourceW
GetComputerNameExW
OpenEventA
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryA
GetCurrentDirectoryA
BuildCommDCBAndTimeoutsW
GetProcAddress
GetModuleHandleA
FreeLibraryAndExitThread
OpenMutexW
FileTimeToLocalFileTime
SearchPathW
LockFile
CreateMutexW
FormatMessageW
GetConsoleScreenBufferInfo
VirtualAlloc
SetMailslotInfo
UnlockFile
GetDiskFreeSpaceExA
GlobalGetAtomNameA
WriteConsoleW
GetCommandLineA
CreateJobObjectW
InitializeCriticalSection
GetNumberOfConsoleMouseButtons
FindNextVolumeW
GetOverlappedResult
GetThreadSelectorEntry
LoadLibraryW
WriteProfileSectionA
AddAtomW
InterlockedIncrement
VerifyVersionInfoW
HeapSize
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotA
WideCharToMultiByte
GetSystemWow64DirectoryW
GetConsoleAliasExesLengthW
WaitForDebugEvent
SetLastError
LoadLibraryA
GetLastError
FoldStringW
GetDefaultCommConfigW
GetConsoleAliasesLengthA
lstrcpyA
LocalAlloc
EnumCalendarInfoExW
EnumDateFormatsExW
ActivateActCtx
GetFileSize
EnumCalendarInfoExA
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameA
GetComputerNameW
ReadConsoleInputA
GetPrivateProfileStructW
_hwrite
GetConsoleAliasW
SetWaitableTimer
GetFullPathNameW
DebugSetProcessKillOnExit
SetCurrentDirectoryA
SetCalendarInfoW
CreateFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MoveFileA
DeleteFileA
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
user32
GetMenuInfo
GetCursorInfo
LoadMenuW
CharUpperW
GetListBoxInfo
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 587KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ