Static task
static1
Behavioral task
behavioral1
Sample
ea4d08b98daff5c14b976ab880e688e9f1916a5e.exe
Resource
win10v2004-20220812-en
General
-
Target
ea4d08b98daff5c14b976ab880e688e9f1916a5e
-
Size
380KB
-
MD5
32c0ade0f25667d55982a0c99f5f6d9b
-
SHA1
ea4d08b98daff5c14b976ab880e688e9f1916a5e
-
SHA256
0c3c54acd182b197e93fd275d433183c380bbab7620bb619c0208e2ca75a0bc5
-
SHA512
fe2bc1846c0bc716d897fc81020ab796d14a1906b186610ac6db155054bc3921686945657c575456c37befc8ffb7352b9ba4d87112f83b509545f0dfc28f3b5e
-
SSDEEP
6144:kXMqr7w3ilKQE6laP/T8SjXLLUTalyZSeP+YBG7B2v/v8x52XGvTyTzdB4tzT:kMqQywQE6laP/T8SjXLwTvZBPTBGgv/s
Malware Config
Signatures
Files
-
ea4d08b98daff5c14b976ab880e688e9f1916a5e.exe windows x86
db528410afedd73528144ea2e475f330
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerifyVersionInfoW
WriteConsoleInputA
EnumDateFormatsA
FindNextFileW
CopyFileExA
DnsHostnameToComputerNameA
ReadConsoleOutputCharacterA
FlushConsoleInputBuffer
LockFile
GetProfileSectionW
QueryDosDeviceA
IsSystemResumeAutomatic
SetProcessPriorityBoost
GlobalGetAtomNameW
lstrlenA
FindNextVolumeMountPointW
GlobalDeleteAtom
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExA
OpenEventW
CallNamedPipeA
GetModuleHandleW
GetSystemDirectoryW
SetCurrentDirectoryW
BuildCommDCBAndTimeoutsA
GetProcAddress
LoadLibraryA
MoveFileWithProgressA
GetCommandLineA
InterlockedExchangeAdd
SearchPathW
CreateActCtxA
FormatMessageW
GetModuleHandleA
EnterCriticalSection
CreateNamedPipeW
GetSystemDefaultLangID
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomW
InterlockedIncrement
HeapSize
_hwrite
InterlockedCompareExchange
GetStartupInfoA
CreateMailslotA
IsDBCSLeadByte
VerifyVersionInfoA
GetLastError
GetPrivateProfileIntW
GetConsoleAliasExesLengthW
DebugBreak
GetTickCount
LoadLibraryW
VirtualAlloc
GetOEMCP
lstrcpyA
GetConsoleAliasW
GetDiskFreeSpaceExW
WriteConsoleA
EnumSystemLocalesA
FileTimeToSystemTime
ResetEvent
LockFileEx
CreateMutexA
FindResourceA
SetCommState
ConvertThreadToFiber
GetConsoleFontSize
LocalAlloc
lstrcpyW
HeapReAlloc
GetFileAttributesA
GetSystemWindowsDirectoryA
ReadConsoleInputW
GetComputerNameW
GetPrivateProfileStructA
OpenWaitableTimerW
EnumResourceNamesA
FillConsoleOutputCharacterA
GetFullPathNameA
GetThreadPriority
AddAtomA
MapUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectA
CreateFileW
BuildCommDCBAndTimeoutsW
SetCalendarInfoA
GetFileSizeEx
GetProfileSectionA
GetDefaultCommConfigW
LocalSize
GetSystemWow64DirectoryW
lstrcatA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
InterlockedDecrement
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlUnwind
GetACP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
SetFilePointer
CloseHandle
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
CreateFileA
user32
CharUpperA
GetCursorInfo
advapi32
ImpersonateNamedPipeClient
AbortSystemShutdownW
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xekide Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zekaku Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vek Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xuyepu Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ