Static task
static1
Behavioral task
behavioral1
Sample
b5e97b8e97c99a8b5048e0e4d8a1dad85cb206d506b6fb88656cfd857f7730d0.exe
Resource
win7-20220812-en
General
-
Target
b5e97b8e97c99a8b5048e0e4d8a1dad85cb206d506b6fb88656cfd857f7730d0
-
Size
364KB
-
MD5
066db72ce22087c69c3e36be008d6540
-
SHA1
c6e9f1cb6f6837c72b05323a877bc21c6a00eb56
-
SHA256
b5e97b8e97c99a8b5048e0e4d8a1dad85cb206d506b6fb88656cfd857f7730d0
-
SHA512
67a20af3687891a0225ebd7b520ad74b58b747aa1dbaf3c62efa762500a1dd926513e73a813c3627b43e7c0f2c06bf47183385bc0271311f0650490b7ddd468d
-
SSDEEP
6144:ufSsUMgXd0+p1FiHS7U2PxdS8T6G7DLfdqqDL6RsisssssssUkdSmCgevNq2uC0:H5PphU2ZdS8T6G7Pfgqn6vsssssssUSh
Malware Config
Signatures
Files
-
b5e97b8e97c99a8b5048e0e4d8a1dad85cb206d506b6fb88656cfd857f7730d0.exe windows x86
a5966d6cb877228ddb44e9ded0dd96ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
SystemTimeToFileTime
CreateDirectoryW
SetFileTime
WriteFile
GetLastError
DeleteFileW
InterlockedDecrement
lstrlenW
lstrlenA
DebugBreak
OutputDebugStringW
InterlockedIncrement
GetSystemTimeAsFileTime
SetEvent
Sleep
WaitForSingleObject
SetEndOfFile
TlsFree
TlsAlloc
TlsSetValue
IsBadWritePtr
IsBadReadPtr
ResetEvent
GetTickCount
CreateEventW
SetWaitableTimer
CreateWaitableTimerW
GetDiskFreeSpaceExW
GetTempFileNameW
GetTempPathW
CancelWaitableTimer
WaitForMultipleObjects
GetModuleFileNameW
GetFileAttributesW
SizeofResource
LoadResource
FindResourceW
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
CopyFileW
GetVersionExW
GetModuleHandleA
TerminateProcess
ExitProcess
GetPrivateProfileStringW
FreeLibrary
LoadLibraryExW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleW
MoveFileExW
UnmapViewOfFile
GetCurrentThread
GetFileType
CreateFileMappingW
GetPrivateProfileIntW
GetSystemTime
lstrcmpA
SetLastError
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrcmpiW
CreateThread
GetCurrentProcessId
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
HeapSize
SetHandleCount
GetConsoleMode
GetConsoleCP
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
HeapReAlloc
HeapCreate
GetStartupInfoA
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
LoadLibraryA
InterlockedExchange
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
ReadFile
SetFilePointer
GetFileSize
VirtualAlloc
VirtualFree
MapViewOfFile
CloseHandle
user32
DestroyWindow
wvsprintfW
CharNextW
shell32
SHGetSpecialFolderPathW
shlwapi
StrStrIA
SHDeleteValueW
StrStrIW
PathGetDriveNumberW
PathFileExistsW
PathCombineW
PathIsRootW
SHGetValueW
PathFindFileNameA
PathAppendW
StrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
setupapi
SetupIterateCabinetW
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE