Static task
static1
Behavioral task
behavioral1
Sample
97cd8f9d92d8b4a69c537312b92b49c860b2376c08db387417e41e06dd286bd0.exe
Resource
win7-20220901-en
General
-
Target
97cd8f9d92d8b4a69c537312b92b49c860b2376c08db387417e41e06dd286bd0
-
Size
372KB
-
MD5
768b2386ceaed30cb49cebd2e593cd30
-
SHA1
7272439ef249b77f58baf03751301fede7d4d4cb
-
SHA256
97cd8f9d92d8b4a69c537312b92b49c860b2376c08db387417e41e06dd286bd0
-
SHA512
ce3b8e580328bb36fd4aef4bff8ab93b9edb11b33273102f4a0caa3b68bd344c5d25953c946e696b0ff0994e9dfcec898b5fe150d6468a0717f29b2fbe0a3b5c
-
SSDEEP
6144:bfSsUMgXd0+p1FiHS7U2Pn8T6G7DLfdqqDL6RsisssssssUkdjJ+Zs80CG8G6:G5PphU2/8T6G7Pfgqn6vsssssssUSjI7
Malware Config
Signatures
Files
-
97cd8f9d92d8b4a69c537312b92b49c860b2376c08db387417e41e06dd286bd0.exe windows x86
a5966d6cb877228ddb44e9ded0dd96ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
SystemTimeToFileTime
CreateDirectoryW
SetFileTime
WriteFile
GetLastError
DeleteFileW
InterlockedDecrement
lstrlenW
lstrlenA
DebugBreak
OutputDebugStringW
InterlockedIncrement
GetSystemTimeAsFileTime
SetEvent
Sleep
WaitForSingleObject
SetEndOfFile
TlsFree
TlsAlloc
TlsSetValue
IsBadWritePtr
IsBadReadPtr
ResetEvent
GetTickCount
CreateEventW
SetWaitableTimer
CreateWaitableTimerW
GetDiskFreeSpaceExW
GetTempFileNameW
GetTempPathW
CancelWaitableTimer
WaitForMultipleObjects
GetModuleFileNameW
GetFileAttributesW
SizeofResource
LoadResource
FindResourceW
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
CopyFileW
GetVersionExW
GetModuleHandleA
TerminateProcess
ExitProcess
GetPrivateProfileStringW
FreeLibrary
LoadLibraryExW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleW
MoveFileExW
UnmapViewOfFile
GetCurrentThread
GetFileType
CreateFileMappingW
GetPrivateProfileIntW
GetSystemTime
lstrcmpA
SetLastError
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrcmpiW
CreateThread
GetCurrentProcessId
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
HeapSize
SetHandleCount
GetConsoleMode
GetConsoleCP
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
GetStartupInfoA
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
LoadLibraryA
InterlockedExchange
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
ReadFile
SetFilePointer
GetFileSize
VirtualAlloc
VirtualFree
MapViewOfFile
CloseHandle
user32
DestroyWindow
wvsprintfW
CharNextW
shell32
SHGetSpecialFolderPathW
shlwapi
StrStrIA
SHDeleteValueW
StrStrIW
PathGetDriveNumberW
PathFileExistsW
PathCombineW
PathIsRootW
SHGetValueW
PathFindFileNameA
PathAppendW
StrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
setupapi
SetupIterateCabinetW
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE