Static task
static1
Behavioral task
behavioral1
Sample
86d8ee50a944ac59eff771e574a7c7e4365c1dbad394e4ad8e471af1ddc5c9cf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86d8ee50a944ac59eff771e574a7c7e4365c1dbad394e4ad8e471af1ddc5c9cf.exe
Resource
win10v2004-20220901-en
General
-
Target
86d8ee50a944ac59eff771e574a7c7e4365c1dbad394e4ad8e471af1ddc5c9cf
-
Size
141KB
-
MD5
5cf706bdd361bc51f48ddc5ac20d4dd0
-
SHA1
f57227cc994d5c9c8863a2bcec3e778716e3cd60
-
SHA256
86d8ee50a944ac59eff771e574a7c7e4365c1dbad394e4ad8e471af1ddc5c9cf
-
SHA512
4db4b0079e5edf869d50ef6a262d95bc3b2dd3bed0100d25d2c5cdc2a9bdc3f1be6768bb1931a5da28d77cc4a9a3d2a0ca88ee1c100e3ef646e0ffb6c736825b
-
SSDEEP
3072:47xcQdXckmeCLi/SCR5L6T1ff2yAHF6OjVv:4bdbqVO
Malware Config
Signatures
Files
-
86d8ee50a944ac59eff771e574a7c7e4365c1dbad394e4ad8e471af1ddc5c9cf.exe windows x86
db54b44540caa761415ffaeafdff092d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
SetEnvironmentVariableA
EnterCriticalSection
FreeLibrary
WriteFile
ResetEvent
GetACP
WaitForMultipleObjects
CreateFileA
GetCommandLineW
LeaveCriticalSection
FindFirstFileW
DeleteCriticalSection
InterlockedDecrement
FileTimeToSystemTime
WideCharToMultiByte
SetHandleCount
HeapReAlloc
WaitForSingleObject
MultiByteToWideChar
InterlockedExchange
GetStdHandle
WaitForSingleObjectEx
GlobalAlloc
RaiseException
CreateThread
GetEnvironmentStrings
CompareStringA
GetSystemInfo
HeapFree
LocalFree
GetEnvironmentStringsW
GetModuleFileNameA
FormatMessageW
TlsSetValue
CreateFileW
TlsGetValue
CreateEventW
TryEnterCriticalSection
FreeLibraryAndExitThread
GetFileType
CloseHandle
InterlockedExchangeAdd
TerminateProcess
LCMapStringW
FreeEnvironmentStringsW
OutputDebugStringA
lstrlenW
SetEvent
CreateMutexW
VirtualAlloc
GetModuleHandleW
InterlockedIncrement
CompareFileTime
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
QueryPerformanceCounter
GetStartupInfoW
GetStartupInfoA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetProcAddress
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetLastError
TlsAlloc
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
FatalAppExitA
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
Sleep
RtlUnwind
HeapSize
CompareStringW
user32
GetSystemMetrics
gdi32
GetObjectW
CombineRgn
RestoreDC
SetPixelV
CreateCompatibleBitmap
GetMapMode
RealizePalette
GetDeviceCaps
Escape
GetObjectA
GetTextColor
SetTextAlign
SetViewportExtEx
GetSystemPaletteEntries
CreateFontIndirectA
ExcludeClipRect
SetPixel
SetRectRgn
CreateBrushIndirect
BitBlt
GetBkColor
SetStretchBltMode
GetTextMetricsW
MoveToEx
GetClipBox
GetWindowExtEx
Polyline
CreateRectRgnIndirect
Ellipse
SetBrushOrgEx
CreateHalftonePalette
SetBkColor
GetStretchBltMode
IntersectClipRect
CreateFontA
CreateRoundRectRgn
GetStockObject
SetWindowExtEx
EndDoc
GetWindowOrgEx
SetViewportOrgEx
GetTextExtentPoint32A
ExtTextOutW
ScaleViewportExtEx
SetBkMode
CreatePatternBrush
CreateDIBitmap
ExtEscape
GetRgnBox
DPtoLP
GetDIBColorTable
DeleteObject
GetPaletteEntries
GetBitmapBits
RectVisible
CreateFontW
ExtTextOutA
GetDCOrgEx
ScaleWindowExtEx
SelectObject
CreateCompatibleDC
SelectPalette
SaveDC
SetMapMode
SetDIBColorTable
GetCurrentPositionEx
PolylineTo
RoundRect
CreatePalette
SetWindowOrgEx
CreateDCA
CreatePen
StretchDIBits
UnrealizeObject
PatBlt
GetDIBits
SetTextColor
GetTextExtentPointA
ExtSelectClipRgn
DeleteEnhMetaFile
GetTextExtentPoint32W
LPtoDP
CreateBitmap
DeleteDC
SelectClipRgn
CreatePolygonRgn
ole32
CoSetProxyBlanket
OleInitialize
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
oleaut32
OleTranslateColor
msi
ord46
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ