Static task
static1
Behavioral task
behavioral1
Sample
A74B599EA12643A01A716A4E286D6EBBED6EDDEDFA82E.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
A74B599EA12643A01A716A4E286D6EBBED6EDDEDFA82E.exe
Resource
win10v2004-20220812-en
General
-
Target
A74B599EA12643A01A716A4E286D6EBBED6EDDEDFA82E.exe
-
Size
783KB
-
MD5
851f7b783fe0dfcfb4d9befc8f167e95
-
SHA1
1e0683b9e3b8fa7695605c93eecb92ee7b4488bb
-
SHA256
a74b599ea12643a01a716a4e286d6ebbed6eddedfa82ed3215ba002f1081847c
-
SHA512
9c8848c6d854fb6089a1c09775985779934ac2fecbdf602a625de0acef956dafe3e6a4e63c1578d9706e4ed42ca91450178c08e544e604a687ca744a396f271a
-
SSDEEP
12288:FIwEu2Qxyr8TgkLNaQ5dqkCY8T5XZjOcVO2CT+J99QOpodTRC2hvVZFIPmkRHI:mW2aTZRqkUTLOxqJAOpKRRh9LIPmf
Malware Config
Signatures
Files
-
A74B599EA12643A01A716A4E286D6EBBED6EDDEDFA82E.exe.exe windows x86
23a10c0599daa8b4efa6cbee1d51dfd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
CopyFileExA
ReadConsoleOutputCharacterW
FlushConsoleInputBuffer
GetLogicalDrives
GetProfileSectionW
VerifyVersionInfoA
QueryDosDeviceW
OpenThread
SetProcessPriorityBoost
GetSystemDirectoryA
GlobalGetAtomNameA
FindResourceA
GetComputerNameExW
GetModuleHandleW
GetSystemDirectoryW
BuildCommDCBAndTimeoutsW
GetProcAddress
GetModuleHandleA
FreeLibraryAndExitThread
OpenMutexW
FileTimeToLocalFileTime
SearchPathW
LockFile
CreateMutexW
FindResourceW
FormatMessageW
EnumDateFormatsA
GetConsoleScreenBufferInfo
VirtualAlloc
GetMailslotInfo
UnlockFile
GetDiskFreeSpaceExA
WriteConsoleW
VerifyVersionInfoW
GetCommandLineW
CreateJobObjectA
InitializeCriticalSection
GetConsoleSelectionInfo
FindNextVolumeW
CreateIoCompletionPort
GetThreadSelectorEntry
LoadLibraryW
WriteProfileSectionA
AddAtomW
InterlockedIncrement
HeapSize
InterlockedExchangeAdd
GetStartupInfoA
MultiByteToWideChar
GetConsoleAliasExesLengthW
WaitForDebugEvent
SetLastError
LoadLibraryA
GetLastError
FoldStringA
GetDefaultCommConfigW
GetConsoleAliasesLengthA
lstrcpyA
LocalAlloc
EnumCalendarInfoExW
EnumDateFormatsExW
ActivateActCtx
GetFileSize
EnumCalendarInfoExA
GetFileAttributesA
GetSystemWindowsDirectoryA
GetAtomNameA
GetComputerNameW
ReadConsoleInputA
EnumDateFormatsW
GetPrivateProfileStructW
_hwrite
GetConsoleAliasW
SetWaitableTimer
GetFullPathNameW
DebugSetProcessKillOnExit
SetCurrentDirectoryA
SetCalendarInfoW
CreateFileA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MoveFileA
DeleteFileA
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapReAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CloseHandle
user32
GetCursorInfo
LoadMenuW
CharUpperW
GetListBoxInfo
GetMenuInfo
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 587KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ