Static task
static1
Behavioral task
behavioral1
Sample
File.exe
Resource
win10v2004-20220812-en
General
-
Target
File.exe
-
Size
347KB
-
MD5
cb41a598c315e74b59f1dbd7c4d7a189
-
SHA1
0331cff4b4d9eb1e177b5f3fcb044b7917a18181
-
SHA256
c821889b10c0657506fc9e304564b8cebed743c6888b9d9fe481f1790c53471e
-
SHA512
7f7d9a0aa43b7e01a18d71bba61e8e33a43a71a28be3d023088233a37184b7d892247e2978b3f5a475d236d6b7ec0beaa6886f6bade6d3f1b833d8c65a51c8d6
-
SSDEEP
6144:sJPOyrFtpdM8DRa7Ib5aqZ7IO98fpJW2gD077ITsqcYDeligaJwVf:sNOybDDYk5LI88fpYY77cb
Malware Config
Signatures
Files
-
File.exe.exe windows x86
53cf06e69ab6814920d9046a288a6256
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
InterlockedDecrement
GetLocaleInfoA
InterlockedIncrement
_lwrite
SetCommTimeouts
GetSystemDirectoryA
MoveFileExW
CreateEventW
WriteConsoleW
VerifyVersionInfoW
WaitNamedPipeW
BuildCommDCBW
LoadLibraryA
FindResourceExA
DeleteTimerQueue
GetFirmwareEnvironmentVariableW
GetConsoleAliasExesLengthA
EnumTimeFormatsW
CopyFileA
ReadConsoleOutputCharacterW
GetConsoleAliasesLengthA
LocalAlloc
GetProcAddress
UnhandledExceptionFilter
SetConsoleDisplayMode
GetSystemWindowsDirectoryW
LoadResource
EndUpdateResourceW
WritePrivateProfileStringA
EnumResourceNamesA
LocalReAlloc
SetFileAttributesA
AreFileApisANSI
GetCurrentDirectoryW
GetConsoleAliasesLengthW
GetAtomNameA
GetFileAttributesW
SetConsoleTitleW
VerSetConditionMask
SetProcessWorkingSetSize
GetLongPathNameA
GetThreadLocale
GetProcessHandleCount
GetSystemDefaultLCID
GetCurrentProcessId
GetLastError
SetCommBreak
BuildCommDCBAndTimeoutsW
OpenJobObjectA
EnterCriticalSection
EnumCalendarInfoExA
SetConsoleMode
GetDiskFreeSpaceA
GetConsoleAliasExesA
GlobalMemoryStatusEx
WriteConsoleOutputCharacterA
IsDBCSLeadByte
WriteConsoleOutputCharacterW
SetLastError
SetEndOfFile
CreateFileW
GetUserDefaultLangID
LoadLibraryW
HeapReAlloc
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetFilePointer
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
Sleep
SetStdHandle
FlushFileBuffers
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
ReadFile
CreateFileA
GetProcessHeap
user32
ClientToScreen
gdi32
GetTextExtentPoint32A
winhttp
WinHttpCloseHandle
Sections
.text Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 40.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jitul Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lafo Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.laz Size: 512B - Virtual size: 23B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pumu Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ