Static task
static1
Behavioral task
behavioral1
Sample
436f5d28b8cff8ac661ed8dbd06e47c7ba2f5772a65fa74e1a3908155e97b19d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
436f5d28b8cff8ac661ed8dbd06e47c7ba2f5772a65fa74e1a3908155e97b19d.exe
Resource
win10v2004-20220812-en
General
-
Target
436f5d28b8cff8ac661ed8dbd06e47c7ba2f5772a65fa74e1a3908155e97b19d
-
Size
582KB
-
MD5
a2a2bc1b6261b4d8125616bfdf838490
-
SHA1
82bf705742096e8f35464e684b762cae2e5c305f
-
SHA256
436f5d28b8cff8ac661ed8dbd06e47c7ba2f5772a65fa74e1a3908155e97b19d
-
SHA512
081ba6c33a5adbe25c22b13220ddaa93d9090ab3e9559ec6563280ac0775d44efa071e1eff72f7c2e734013d5aaa8251be18274156560318736aed0a36290e6f
-
SSDEEP
12288:bWUCioXQBK1dAaA922LNQqD8Cy/Y/GbweiacbFTsU3BPaGE:bWTi9922LNQqDCMGbwjbFTfRPaGE
Malware Config
Signatures
Files
-
436f5d28b8cff8ac661ed8dbd06e47c7ba2f5772a65fa74e1a3908155e97b19d.exe windows x86
e258e751db3afb5f43f3372c43f47af0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
LeaveCriticalSection
ExitThread
EnterCriticalSection
DeleteCriticalSection
DeleteFileA
FreeLibrary
CreateProcessW
LoadLibraryW
GetModuleFileNameW
GetProcAddress
CloseHandle
DeleteFileW
MoveFileExW
Sleep
GetLastError
MoveFileW
GetModuleHandleW
UnmapViewOfFile
GetPriorityClass
GetThreadPriority
SetPriorityClass
SetThreadPriority
QueryPerformanceFrequency
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
ExitProcess
GetStringTypeW
GetStringTypeA
LoadLibraryA
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LCMapStringA
HeapSize
GetModuleHandleA
LCMapStringW
IsValidCodePage
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateEventW
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentThread
ReadFile
SetFilePointer
CreateFileW
SetEndOfFile
WriteFile
SetFileAttributesW
RemoveDirectoryW
WideCharToMultiByte
MultiByteToWideChar
VirtualProtect
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
GetFileAttributesW
GetOverlappedResult
CopyFileW
SetConsoleTextAttribute
GetStdHandle
GetConsoleScreenBufferInfo
GetFullPathNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
GetTimeZoneInformation
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
FindNextFileW
CreateDirectoryW
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
WriteConsoleW
GetFileType
GetDriveTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCurrentDirectoryA
GetDriveTypeA
GetCPInfo
GetACP
GetOEMCP
user32
wsprintfW
DispatchMessageW
MoveWindow
SetWindowTextW
SendMessageW
SetDlgItemTextW
MessageBoxW
CreateDialogParamW
ShowWindow
SetWindowLongW
GetWindowLongW
TranslateMessage
KillTimer
GetWindowDC
PostQuitMessage
GetMessageW
GetWindowRect
SetTimer
DestroyWindow
FindWindowW
LoadStringW
gdi32
GetDeviceCaps
ole32
OleInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
ws2_32
socket
select
WSAGetLastError
WSAStartup
WSACleanup
getsockopt
connect
ioctlsocket
recv
send
htons
setsockopt
gethostbyname
closesocket
Sections
.text Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ