Static task
static1
Behavioral task
behavioral1
Sample
df8b8956c52279384a25257eed13ec47b6b0d643132ba8965c7d36317842f93f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df8b8956c52279384a25257eed13ec47b6b0d643132ba8965c7d36317842f93f.exe
Resource
win10v2004-20220901-en
General
-
Target
df8b8956c52279384a25257eed13ec47b6b0d643132ba8965c7d36317842f93f
-
Size
2.9MB
-
MD5
9ee0b656c1b8186e17a2fc22a8d769d6
-
SHA1
65e1adf726019de48eddf110935709f1c9141c3b
-
SHA256
df8b8956c52279384a25257eed13ec47b6b0d643132ba8965c7d36317842f93f
-
SHA512
6e44aa4024a8328df9cbf712a899f018b36b99af82fbe6e0804a24cc2bb34ae54ea4d7deb7c5a89552aea0febd025d75d6b4e676f039a067152e9de68da3c9cd
-
SSDEEP
12288:4PjdPZdPCPjdPZdPaPjdPZdPhPjdPZdPhPjdPZdPRPjdPZdPRPjdPZdP0PjdPZdP:
Malware Config
Signatures
Files
-
df8b8956c52279384a25257eed13ec47b6b0d643132ba8965c7d36317842f93f.exe windows x86
c66f38b2b74dad7ba7acd06da54ab77a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetProcAddress
LoadLibraryExW
ExitProcess
CreateEventA
WaitForSingleObject
WinExec
VirtualAllocEx
SleepEx
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateFileA
CloseHandle
CreateEventA
CreateProcessA
SetEvent
CreateMutexA
ReleaseMutex
GetStartupInfoA
GetNumaAvailableMemoryNode
AllocConsole
LZRead
VerLanguageNameA
GetNextVDMCommand
ExpungeConsoleCommandHistoryA
GetDiskFreeSpaceA
GetSystemInfo
WideCharToMultiByte
CreateTapePartition
UTRegister
AddLocalAlternateComputerNameA
FillConsoleOutputCharacterW
TzSpecificLocalTimeToSystemTime
MoveFileWithProgressA
GetAtomNameA
SetFileApisToOEM
GetQueuedCompletionStatus
GetProcessIoCounters
GlobalWire
GetConsoleNlsMode
SetThreadExecutionState
SetFileShortNameA
ReadConsoleOutputA
GetCommMask
CreateEventW
GetSystemDefaultLangID
SetCommTimeouts
PurgeComm
CancelTimerQueueTimer
GetLargestConsoleWindowSize
EnumResourceLanguagesA
CompareStringW
LocalAlloc
RegisterConsoleOS2
Heap32First
Module32First
GetSystemTimes
GetVolumeNameForVolumeMountPointA
GlobalAddAtomW
SetSystemPowerState
BeginUpdateResourceA
WritePrivateProfileStructW
ReadConsoleInputExA
GetConsoleWindow
GlobalHandle
FreeUserPhysicalPages
LCMapStringA
Thread32Next
CallNamedPipeA
SetConsoleOutputCP
BaseUpdateAppcompatCache
SetConsoleCP
EnumResourceTypesW
OpenEventW
OpenProcess
OpenConsoleW
FindFirstChangeNotificationW
GetCurrentDirectoryA
GetVDMCurrentDirectories
lstrcmpiW
SetTimerQueueTimer
SetThreadIdealProcessor
GetProcessWorkingSetSize
GetConsoleFontSize
GetNumaNodeProcessorMask
lstrcmpW
FindNextFileA
AddConsoleAliasW
SetConsoleInputExeNameA
FlushFileBuffers
SetEndOfFile
ExpungeConsoleCommandHistoryW
WritePrivateProfileStringW
TransactNamedPipe
GetLogicalDrives
SetUserGeoID
WriteTapemark
GetCommConfig
GetFirmwareEnvironmentVariableA
IsBadWritePtr
SetCommMask
CreateNamedPipeA
IsBadReadPtr
MapUserPhysicalPages
SetConsoleCursor
_lopen
WaitForSingleObjectEx
GetPrivateProfileStringW
VirtualProtect
GetThreadPriorityBoost
SetConsoleMode
GetThreadSelectorEntry
EnumCalendarInfoExA
ChangeTimerQueueTimer
EnumTimeFormatsW
SetNamedPipeHandleState
FoldStringA
QueryPerformanceCounter
ReplaceFileA
GetCompressedFileSizeA
GenerateConsoleCtrlEvent
DelayLoadFailureHook
GetDefaultCommConfigA
AddConsoleAliasA
DeviceIoControl
GetUserDefaultLCID
WriteFileGather
Thread32First
LockFile
ReleaseActCtx
lstrcpynA
GetProfileSectionA
BuildCommDCBAndTimeoutsA
MoveFileExA
GetTempPathW
ResetWriteWatch
CreatePipe
SetFileAttributesA
GetNativeSystemInfo
GlobalAddAtomA
GetVolumePathNamesForVolumeNameW
GlobalFindAtomW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE