Static task
static1
Behavioral task
behavioral1
Sample
4231e236e616ba480cff4d48fc86fdde7194b95afaccab5e14f6078b26e365ff.exe
Resource
win7-20220812-en
General
-
Target
4231e236e616ba480cff4d48fc86fdde7194b95afaccab5e14f6078b26e365ff
-
Size
1.9MB
-
MD5
1d7400690b3740002312c03ff3d8019a
-
SHA1
795830e6df5d06f0b61be17c073a224792d73476
-
SHA256
4231e236e616ba480cff4d48fc86fdde7194b95afaccab5e14f6078b26e365ff
-
SHA512
6c529faafa50642497107a3a46bee96ee2354b050811806f9ee8b8d2b0abddda6a2d14c92c32ab5f0bcad8666b4d68fe23cd38e8691c1506eb7f4683bd89266d
-
SSDEEP
49152:9LofIE2Okl1/bX/k98G1vXsGp+SyGARo7p/ZGILK1Q:9EX2OkbDMXZXBpByGARIp5Ky
Malware Config
Signatures
Files
-
4231e236e616ba480cff4d48fc86fdde7194b95afaccab5e14f6078b26e365ff.exe windows x86
262f3c2f00544276f1579684f75c5bdb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringW
SetWaitableTimer
WaitNamedPipeW
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesW
GetCPInfoExA
EnumResourceTypesA
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
DeleteFileA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
VirtualAlloc
LoadLibraryW
AddRefActCtx
GetConsoleAliasW
WritePrivateProfileStringW
EnumResourceNamesA
LocalFileTimeToFileTime
LocalReAlloc
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
VirtualProtect
GetComputerNameExW
FindNextFileW
SetPriorityClass
ScrollConsoleScreenBufferA
OpenJobObjectA
InitializeCriticalSection
FindResourceExW
SetConsoleMode
_lclose
GlobalUnWire
GetComputerNameA
VerifyVersionInfoW
GetLastError
GetSystemDefaultLCID
GetThreadLocale
GetVolumePathNameA
ReadConsoleA
GetModuleHandleA
GetStringTypeA
FindFirstChangeNotificationW
Sleep
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
GetStartupInfoW
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeW
gdi32
GetCharWidth32A
GetFontUnicodeRanges
advapi32
CloseEventLog
GetOldestEventLogRecord
ReportEventW
ole32
CoRegisterMallocSpy
winhttp
WinHttpSetTimeouts
WinHttpReadData
msimg32
TransparentBlt
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 41.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ