Static task
static1
Behavioral task
behavioral1
Sample
130d93b527688c096c6d8ac3ab1f0154744ee593b02714e5dd3a50d2d480c57e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
130d93b527688c096c6d8ac3ab1f0154744ee593b02714e5dd3a50d2d480c57e.exe
Resource
win10v2004-20220812-en
General
-
Target
130d93b527688c096c6d8ac3ab1f0154744ee593b02714e5dd3a50d2d480c57e
-
Size
138KB
-
MD5
64420977ae71fea0eba93b491ad96390
-
SHA1
87b926ee2c95c05f98147cc3bf411d71745ffadd
-
SHA256
130d93b527688c096c6d8ac3ab1f0154744ee593b02714e5dd3a50d2d480c57e
-
SHA512
334de75f75dd7de4366871929cca821d1238e4a83ba64e285c13f2534e9367c81ba7704e077c78aaa4be40d7f0c7283747d3b781b6163721c017bda21dc5a6e7
-
SSDEEP
96:NsRd9+WpWDxI1E0sb/hdvy0kodLA71IrCH:NkL+KwxI1E/b5dv/kkM722
Malware Config
Signatures
Files
-
130d93b527688c096c6d8ac3ab1f0154744ee593b02714e5dd3a50d2d480c57e.exe windows x86
bb50aab0d232922a056510ed29bed765
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetProcAddress
LoadLibraryExW
ExitProcess
CreateEventA
WaitForSingleObject
WinExec
VirtualAllocEx
SleepEx
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
CloseHandle
CreateEventA
CreateProcessA
SetEvent
CreateMutexA
ReleaseMutex
CreateEventW
ReadConsoleOutputAttribute
CreatePipe
SetConsoleActiveScreenBuffer
FindNextVolumeMountPointA
GetPrivateProfileSectionNamesW
IsBadReadPtr
BaseCheckAppcompatCache
SetConsoleMode
TlsSetValue
UpdateResourceW
EnumResourceLanguagesA
GetComputerNameA
AddConsoleAliasW
AllocateUserPhysicalPages
SetConsoleMenuClose
RequestDeviceWakeup
FillConsoleOutputAttribute
ConnectNamedPipe
SetConsoleTextAttribute
GetConsoleAliasExesLengthA
FatalAppExitW
SetCalendarInfoW
CheckNameLegalDOS8Dot3A
GetConsoleDisplayMode
GetConsoleCommandHistoryW
OpenFile
VerLanguageNameW
CreateHardLinkW
LZOpenFileA
lstrcpynA
HeapSummary
CreateActCtxW
SetConsoleFont
SetFilePointerEx
ContinueDebugEvent
WaitCommEvent
FindNextVolumeMountPointW
GetCommState
GlobalDeleteAtom
GetConsoleWindow
QueueUserAPC
GetDiskFreeSpaceExW
CreateWaitableTimerW
WritePrivateProfileStructA
EnumSystemCodePagesW
GetSystemDefaultLCID
BaseInitAppcompatCacheSupport
SetThreadPriorityBoost
PeekConsoleInputA
GetModuleHandleExA
SetThreadLocale
GetProfileIntA
CreateIoCompletionPort
CreateFiberEx
VirtualFree
TransactNamedPipe
BasepCheckWinSaferRestrictions
GetLongPathNameA
GetEnvironmentVariableW
GetSystemDefaultUILanguage
HeapValidate
WaitNamedPipeW
EnumTimeFormatsW
FreeLibrary
GlobalUnlock
GetFileSize
EnumSystemLanguageGroupsW
SetUnhandledExceptionFilter
ReadConsoleW
BaseUpdateAppcompatCache
SetThreadIdealProcessor
GetAtomNameW
ConvertDefaultLocale
WideCharToMultiByte
GetTempFileNameW
UnregisterWait
FormatMessageA
GetNumberOfConsoleFonts
lstrlenA
GetVDMCurrentDirectories
FileTimeToDosDateTime
VirtualQuery
OpenEventW
SetPriorityClass
GetSystemWindowsDirectoryA
FormatMessageW
GlobalWire
GetProcessWorkingSetSize
SetFileAttributesA
GetNumaNodeProcessorMask
FillConsoleOutputCharacterA
AreFileApisANSI
ExpandEnvironmentStringsW
VirtualLock
VirtualProtect
SetFileApisToOEM
GetCurrentActCtx
GetModuleFileNameW
GetLocalTime
WritePrivateProfileStringA
GetDefaultCommConfigA
GlobalFindAtomW
LoadLibraryExA
ReleaseActCtx
WriteFileEx
FreeConsole
lstrcmpiW
GetThreadIOPendingFlag
GetExpandedNameA
SetCommConfig
GetGeoInfoA
DeleteVolumeMountPointW
WriteConsoleOutputW
GetConsoleCursorMode
_llseek
OpenJobObjectA
VerifyVersionInfoW
lstrcmpW
GetFileAttributesW
Module32FirstW
SetConsoleOS2OemFormat
GetCurrencyFormatW
GetFileInformationByHandle
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE