Static task
static1
Behavioral task
behavioral1
Sample
d5331c57d7c71c02dc46924e1a732fac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d5331c57d7c71c02dc46924e1a732fac.exe
Resource
win10v2004-20220812-en
General
-
Target
d5331c57d7c71c02dc46924e1a732fac.exe
-
Size
350KB
-
MD5
d5331c57d7c71c02dc46924e1a732fac
-
SHA1
ca135e3655dd834988ae81c09af3d6bb5e96032c
-
SHA256
c63f9c9fb7769b5051c4e96d15fb27797c29a193b48aad2aef9f3ccbab2294ac
-
SHA512
7f16521ed50aa7c7b2660aee1f020c174e1f150cd5e266b362d6f588b4813fd880389d04ed08d87c2ea4446b86870d50308662e98b29da2de0a6366388a21035
-
SSDEEP
6144:tmD5AvvHX+sKnPhs7NPPiiUMS5hGWmLLfFEKS85TdJ03U5hTzHWalwFDGylJH8eH:tm5AHXsPhs7NPPOV5hGWmfAAbF5RzHJ8
Malware Config
Signatures
Files
-
d5331c57d7c71c02dc46924e1a732fac.exe.exe windows x86
eab7d550b9cdca5c6bd9023d54b79da8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
GetNamedPipeHandleStateA
GetQueuedCompletionStatus
FillConsoleOutputCharacterA
EnumSystemCodePagesW
LocalLock
GetVolumeNameForVolumeMountPointA
GetVersionExA
VerifyVersionInfoA
WriteConsoleInputW
EnumDateFormatsA
FindNextFileA
CopyFileExW
BuildCommDCBAndTimeoutsA
VirtualLock
WriteProfileStringA
VerifyVersionInfoW
GetDriveTypeW
GetFileInformationByHandle
DeleteFileA
FindNextVolumeMountPointW
TlsGetValue
ResetWriteWatch
GetConsoleTitleW
GetComputerNameExW
GetTimeZoneInformation
GetModuleHandleA
GetSystemDirectoryA
GetDriveTypeA
LoadLibraryA
GetShortPathNameW
ReleaseActCtx
GetProfileSectionW
DeleteFileW
GetCommandLineA
InterlockedExchangeAdd
InterlockedDecrement
CreateActCtxW
FindResourceA
FormatMessageA
GetModuleFileNameA
CreateJobObjectW
InitializeCriticalSection
GetNumberOfConsoleMouseButtons
FindNextVolumeA
CreateNamedPipeW
WritePrivateProfileStringA
GetConsoleAliasesLengthW
WriteProfileSectionW
AddAtomA
InterlockedIncrement
GetVersionExW
HeapFree
_hread
InterlockedCompareExchange
GetStartupInfoW
ConnectNamedPipe
GetCPInfoExA
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntW
GetConsoleAliasExesW
DebugBreak
EndUpdateResourceA
GetTickCount
VirtualQueryEx
DeleteVolumeMountPointA
OpenFileMappingA
GetModuleHandleW
SetDefaultCommConfigA
VirtualAlloc
GetSystemWindowsDirectoryA
TerminateProcess
GetACP
GetDiskFreeSpaceExA
EnumResourceTypesA
IsProcessInJob
lstrcpynW
WriteConsoleW
GetProcAddress
lstrcpyA
LoadLibraryW
ReadConsoleOutputW
SetHandleInformation
WritePrivateProfileSectionA
DeleteCriticalSection
GetFileAttributesA
DeactivateActCtx
CopyFileW
GlobalMemoryStatus
SetTapeParameters
GetDevicePowerState
ResetEvent
LockFile
MoveFileA
DisableThreadLibraryCalls
GetOverlappedResult
SetCommTimeouts
GlobalAlloc
SetThreadPriorityBoost
SetFileShortNameW
GetFileAttributesW
SetCalendarInfoA
ConvertFiberToThread
GetConsoleTitleA
SetComputerNameW
GetConsoleAliasesA
SetConsoleOutputCP
MoveFileWithProgressW
GetStdHandle
GetLocalTime
EnumSystemLocalesW
ActivateActCtx
OpenSemaphoreA
GetModuleHandleExA
FoldStringW
GetFileSize
SetUnhandledExceptionFilter
GetConsoleAliasesLengthA
SetProcessShutdownParameters
lstrcpynA
GlobalUnWire
FillConsoleOutputCharacterW
GetCompressedFileSizeA
ReadConsoleA
FreeUserPhysicalPages
WriteConsoleOutputCharacterW
TerminateJobObject
CreateFileA
SetTimerQueueTimer
SetLastError
UnhandledExceptionFilter
RaiseException
GetStartupInfoA
HeapValidate
IsBadReadPtr
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
IsDebuggerPresent
CloseHandle
SetStdHandle
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
Sleep
ExitProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
OutputDebugStringW
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
MultiByteToWideChar
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hikit Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.low Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zusija Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xetumu Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ