Static task
static1
Behavioral task
behavioral1
Sample
f1818bdd00c4041f871f0de80480b5e8816212f7932f224952692702c7b5023e.exe
Resource
win7-20220812-en
General
-
Target
f1818bdd00c4041f871f0de80480b5e8816212f7932f224952692702c7b5023e
-
Size
392KB
-
MD5
6b6c2a59b76470ce4b6510abf7766800
-
SHA1
17ed13d05ec3eb87d60d65a4e7f6c986968d04e8
-
SHA256
f1818bdd00c4041f871f0de80480b5e8816212f7932f224952692702c7b5023e
-
SHA512
75fc8595c9df0a838638f3f7f9b1190efccdc5d66272c57745743d17863f78c3b4ceb0b908a245bdca3c3cb92d465439d7f81328c6fb9fc48ba6355b1758e7bd
-
SSDEEP
12288:2A5kWqIpoVOYNlY/xQHLWQyFbGQ6X6IX95:2AfXpwOYNlY/xQHLWQyRLy
Malware Config
Signatures
Files
-
f1818bdd00c4041f871f0de80480b5e8816212f7932f224952692702c7b5023e.exe windows x86
987513aeb99a9d59ff8b27b25dd41a15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
SetFilePointer
GetFileSize
CloseHandle
CreateFileA
GetCurrentProcessId
GetLocalTime
GetCurrentProcess
GetModuleHandleA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
Sleep
GetModuleFileNameW
ExpandEnvironmentStringsA
GetModuleFileNameA
SetEvent
CreateEventA
OpenEventA
ReleaseMutex
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadPriority
GetComputerNameA
lstrcpynA
lstrcatA
lstrcpyA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetTickCount
GetStartupInfoA
ExitThread
CreateThread
LCMapStringA
LCMapStringW
GetCPInfo
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetACP
GetOEMCP
HeapSize
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
ReadFile
GetLocaleInfoW
CreateFileW
SetEndOfFile
GetCurrentThreadId
GetWindowsDirectoryA
DeleteFileA
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
SetLastError
GetCommandLineA
GetSystemDirectoryA
FreeLibrary
WritePrivateProfileStringA
GetLastError
LoadLibraryA
GetProcessHeap
GetProcAddress
winspool.drv
GetPrinterDriverDirectoryA
ClosePrinter
GetPrinterA
SetPrinterA
EnumPrintersA
OpenPrinterA
advapi32
InitializeSecurityDescriptor
RegEnumValueA
RegCreateKeyExA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
SetKernelObjectSecurity
GetSecurityDescriptorDacl
SetSecurityInfo
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
RegQueryValueExA
RegCloseKey
AllocateAndInitializeSid
GetAce
GetLengthSid
IsValidSid
FreeSid
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
oleaut32
SysFreeString
SysAllocString
SysStringLen
Sections
.text Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE