Static task
static1
Behavioral task
behavioral1
Sample
d2e87450a53d6f1800fcefd60ff74c62fc0929b050848425a0d60b091cd52239.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d2e87450a53d6f1800fcefd60ff74c62fc0929b050848425a0d60b091cd52239.exe
Resource
win10v2004-20220901-en
General
-
Target
d2e87450a53d6f1800fcefd60ff74c62fc0929b050848425a0d60b091cd52239
-
Size
137KB
-
MD5
6b3907a863ffc036b58e81f23ae51a50
-
SHA1
7499d2ba119296a454bee21db42123f7719391ed
-
SHA256
d2e87450a53d6f1800fcefd60ff74c62fc0929b050848425a0d60b091cd52239
-
SHA512
620e36ca9444c385aab26f1bf105fd5a22d6376d489f0ad532a062b7d57e79a7ef4dcc905f9cda730144f7b0b53ce8c3b5675eeedc615d068410a6d9770f3e33
-
SSDEEP
96:C2YKszMYqizKszMYqi1xI1E/IrdWega87cLrnpZDM2LHYJ:C2clqi9lqi1xI1EQrspNc3npZDM2L4J
Malware Config
Signatures
Files
-
d2e87450a53d6f1800fcefd60ff74c62fc0929b050848425a0d60b091cd52239.exe windows x86
97413ea2eae1c50f6d8b904dc8683d95
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetProcAddress
LoadLibraryExW
ExitProcess
CreateEventA
WaitForSingleObject
WinExec
VirtualAllocEx
SleepEx
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
CloseHandle
CreateEventA
CreateProcessA
SetEvent
CreateMutexA
ReleaseMutex
GetThreadTimes
SetCommTimeouts
GetConsoleAliasW
DosDateTimeToFileTime
SetConsoleKeyShortcuts
OpenFileMappingW
GlobalUnfix
CreateRemoteThread
GetConsoleAliasesW
GetConsoleCommandHistoryLengthA
GetProcessTimes
IsBadWritePtr
TermsrvAppInstallMode
LocalFileTimeToFileTime
GetCommandLineA
GetNativeSystemInfo
SetCurrentDirectoryW
FindResourceExW
OpenWaitableTimerA
VerLanguageNameW
SetConsoleScreenBufferSize
GetDiskFreeSpaceA
SetFilePointerEx
ReadConsoleOutputA
CreateProcessInternalW
lstrcatA
CreateHardLinkW
Thread32First
GetConsoleScreenBufferInfo
GetProfileSectionA
QueueUserWorkItem
WriteFileEx
_lread
LZOpenFileA
ReadConsoleW
GetSystemDirectoryA
EnumUILanguagesA
IsBadCodePtr
SetConsoleCursorPosition
WritePrivateProfileSectionA
WriteConsoleInputW
WriteConsoleInputVDMW
GetCompressedFileSizeA
GetVolumeNameForVolumeMountPointA
DeleteAtom
GetTickCount
RemoveLocalAlternateComputerNameA
AllocConsole
GetConsoleInputExeNameA
GetCurrentDirectoryW
GlobalMemoryStatusEx
SetFileAttributesW
GlobalHandle
GetLongPathNameW
GetLogicalDriveStringsW
LocalShrink
SetVDMCurrentDirectories
FindFirstVolumeA
EnumResourceNamesA
WaitNamedPipeW
FillConsoleOutputCharacterA
SetStdHandle
SetThreadContext
BaseCheckAppcompatCache
OpenSemaphoreA
DeleteTimerQueueEx
GetCurrentDirectoryA
FindFirstVolumeW
GetCurrentThread
SetConsoleActiveScreenBuffer
SystemTimeToFileTime
OpenEventA
UnregisterConsoleIME
IsBadHugeWritePtr
GetNumberOfConsoleInputEvents
SetThreadExecutionState
LockFileEx
CreateActCtxW
LZCopy
WriteConsoleW
AddConsoleAliasA
GetVersionExA
ZombifyActCtx
TerminateJobObject
OpenJobObjectW
SuspendThread
RegisterWaitForSingleObject
GetConsoleAliasesA
SetConsoleCP
SignalObjectAndWait
SetHandleInformation
BackupSeek
LCMapStringW
GetPrivateProfileSectionNamesA
GetTimeZoneInformation
SetConsoleFont
CreateWaitableTimerW
SetCommState
UpdateResourceW
FileTimeToLocalFileTime
CreateDirectoryW
SetFilePointer
DisableThreadLibraryCalls
FindAtomW
GlobalUnlock
CheckRemoteDebuggerPresent
CheckNameLegalDOS8Dot3A
GetConsoleCommandHistoryW
lstrcpynA
_lclose
SetCommConfig
GetConsoleTitleW
VirtualFree
EndUpdateResourceA
WriteConsoleA
TransmitCommChar
GetCommModemStatus
DefineDosDeviceW
FindFirstFileA
GetPrivateProfileStringW
SetConsoleCursorMode
VerifyVersionInfoW
BuildCommDCBAndTimeoutsA
GetCurrentProcess
EnumResourceTypesA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE