Static task
static1
Behavioral task
behavioral1
Sample
4df358b90472468fcf7bcd1991e2fe9849cc1f3efcb1cf5722146e680bc8eba5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4df358b90472468fcf7bcd1991e2fe9849cc1f3efcb1cf5722146e680bc8eba5.exe
Resource
win10v2004-20220901-en
General
-
Target
4df358b90472468fcf7bcd1991e2fe9849cc1f3efcb1cf5722146e680bc8eba5.exe
-
Size
326KB
-
MD5
b5bedcf22859fa09e301453d93f8664a
-
SHA1
f3eede424c06ca5472ca5593c7721bbdb410d31f
-
SHA256
4df358b90472468fcf7bcd1991e2fe9849cc1f3efcb1cf5722146e680bc8eba5
-
SHA512
23007a1849f9360904e83a45f9f69db1533beb0d8849d5a92bbfdf830c5c1944fbff64d175d803c8b9d57673fcec44de4682b4b5f32aab8ce9ff7c7321fca35f
-
SSDEEP
6144:rKwy98N0YPGpTzmeEI9igzQFF4y+H00p7ITsq5rdmrUnigabwVfw:rlN0gcCeEI9igEDx+HJp7lgi
Malware Config
Signatures
Files
-
4df358b90472468fcf7bcd1991e2fe9849cc1f3efcb1cf5722146e680bc8eba5.exe.exe windows x86
cd85cd43cbc57bf99f3ac2d820ee1b7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
UnhandledExceptionFilter
GetModuleFileNameA
GetLocaleInfoA
_lwrite
WriteConsoleInputW
ReadConsoleInputA
SetCommTimeouts
GetSystemDirectoryA
MoveFileExW
CreateEventW
WriteConsoleW
VerifyVersionInfoW
WaitNamedPipeA
BuildCommDCBA
InterlockedDecrement
BeginUpdateResourceW
CancelTimerQueueTimer
GetCPInfoExA
GetConsoleAliasExesLengthA
EnumTimeFormatsA
LoadLibraryA
CopyFileW
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthA
GetProcAddress
GetUserDefaultLangID
CancelWaitableTimer
GetSystemWindowsDirectoryA
SizeofResource
EndUpdateResourceW
WritePrivateProfileStringA
EnumResourceNamesW
LocalReAlloc
SetFileAttributesW
AreFileApisANSI
GetCurrentDirectoryW
GetAtomNameA
GetFileAttributesW
SetConsoleTitleW
VerSetConditionMask
SetProcessWorkingSetSize
GetLongPathNameA
GlobalAlloc
GetSystemDefaultLCID
GetCurrentProcessId
GetLastError
PurgeComm
BuildCommDCBAndTimeoutsW
OpenJobObjectA
LeaveCriticalSection
FindResourceExA
EnumCalendarInfoExA
GetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesA
GlobalMemoryStatusEx
ReadConsoleOutputAttribute
GetCPInfoExW
SetEndOfFile
CreateFileW
HeapReAlloc
HeapFree
HeapAlloc
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineW
HeapSetInformation
GetStartupInfoW
EncodePointer
IsProcessorFeaturePresent
SetFilePointer
EnterCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetConsoleCP
SetHandleCount
GetFileType
CloseHandle
RtlUnwind
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
RaiseException
SetStdHandle
FlushFileBuffers
Sleep
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
ReadFile
CreateFileA
GetProcessHeap
user32
ClientToScreen
winhttp
WinHttpCloseHandle
Sections
.text Size: 190KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 40.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hal Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cunobe Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wedon Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nabo Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ