Static task
static1
Behavioral task
behavioral1
Sample
BA317887C3057DA350F05457E7D47F1BEB62AB6C381DB.exe
Resource
win7-20220812-en
General
-
Target
BA317887C3057DA350F05457E7D47F1BEB62AB6C381DB.exe
-
Size
209KB
-
MD5
7404b91ed3fabf2597f9ef51fd364911
-
SHA1
1e27af6395c118e70da96525b8aa55ab19fa395a
-
SHA256
ba317887c3057da350f05457e7d47f1beb62ab6c381db6e8e990bab12976a1f3
-
SHA512
27993fd24203d68589eddc5b0ca025a1f08e6632e6fe71d7b0362e44dfb75d4c66e337e159bd66b0e5e727d17ddb874f745b395a304069ea2cf465acea653681
-
SSDEEP
3072:GueYRdmv21XlHf3W/dYsrxuEzr9ynLqjbwOXng8B6twTNyZZ0EYVesxkgaBChl:GeRUMVHfxsrx6qjbxZ6ehn3biga
Malware Config
Signatures
Files
-
BA317887C3057DA350F05457E7D47F1BEB62AB6C381DB.exe.exe windows x86
5c45e2408f6d5ef70b59994d65b17ded
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringW
InterlockedDecrement
_lwrite
CancelWaitableTimer
WaitNamedPipeA
BuildCommDCBW
GetConsoleAliasExesLengthA
PeekConsoleInputA
CreateFileW
EnumResourceTypesA
GetCPInfoExA
GetFirmwareEnvironmentVariableA
GetModuleFileNameA
BeginUpdateResourceA
GetConsoleAliasExesLengthW
WriteConsoleA
FillConsoleOutputCharacterW
WriteConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
GetSystemDefaultLangID
GetConsoleAliasA
FindNextChangeNotification
LocalReAlloc
RemoveDirectoryA
lstrcpynW
FindFirstFileExW
GetVolumeInformationW
GetCurrentDirectoryA
GetConsoleAliasesLengthW
SetConsoleTitleW
GetConsoleProcessList
FindNextFileW
OpenJobObjectA
_lopen
GetFileAttributesExW
SetComputerNameW
GetDiskFreeSpaceA
GetProcessHeap
SetEndOfFile
DeleteFileW
RaiseException
RtlUnwind
MultiByteToWideChar
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
HeapAlloc
GetLastError
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LoadLibraryW
LCMapStringW
GetStringTypeW
SetFilePointer
SetStdHandle
CloseHandle
CreateFileA
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
WriteConsoleW
user32
ScreenToClient
advapi32
IsTokenUntrusted
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 450KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ