Static task
static1
Behavioral task
behavioral1
Sample
ab9311ccda07b4679bf2732a5f76efb60af363a5f7bf920bb8d1a7c6b786aeb9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab9311ccda07b4679bf2732a5f76efb60af363a5f7bf920bb8d1a7c6b786aeb9.exe
Resource
win10v2004-20220901-en
General
-
Target
ab9311ccda07b4679bf2732a5f76efb60af363a5f7bf920bb8d1a7c6b786aeb9
-
Size
420KB
-
MD5
5349428cdeb3b971fd0d6a0a2dee75dd
-
SHA1
b94143e240418b745dfea26e05568ad10ea9b37b
-
SHA256
ab9311ccda07b4679bf2732a5f76efb60af363a5f7bf920bb8d1a7c6b786aeb9
-
SHA512
f8b07cc531ae2bb5ef53bea78b8cc9b09a5645b39f2c4f28a1bd9050ecdd3427667dbd2da9afd1d2284b704697a93ade711cba0a58ec4dc3a7f0885918f67615
-
SSDEEP
12288:n4MksIF74MqjRi86aGWaX7HyPfCX5CzXFU5nthZ:49F4MGRh6aGWgLpQO5nth
Malware Config
Signatures
Files
-
ab9311ccda07b4679bf2732a5f76efb60af363a5f7bf920bb8d1a7c6b786aeb9.exe windows x86
47fd5e74c27c4f6e1f926ccf3bdda17e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WriteProfileSectionW
GetNumaProcessorNode
FindFirstVolumeW
SetConsoleCursorInfo
HeapLock
FindFirstChangeNotificationW
WaitForSingleObject
GetNamedPipeHandleStateA
FileTimeToDosDateTime
CallNamedPipeW
EnumResourceTypesW
EnumResourceNamesW
TerminateProcess
ActivateActCtx
GetConsoleAliasesLengthA
GetVersionExA
GetConsoleOutputCP
GetDefaultCommConfigW
GetCommConfig
WritePrivateProfileStructA
FreeEnvironmentStringsA
CreateTimerQueueTimer
FindNextVolumeA
LeaveCriticalSection
WriteConsoleInputA
TlsSetValue
SetComputerNameExA
FindAtomA
BuildCommDCBAndTimeoutsA
LocalAlloc
VerifyVersionInfoA
TlsGetValue
GetCommandLineA
InterlockedExchange
GetCalendarInfoA
CopyFileW
ReleaseActCtx
OutputDebugStringW
FormatMessageW
GetPriorityClass
WritePrivateProfileStringW
HeapSize
TerminateThread
GlobalUnfix
HeapCompact
GetStartupInfoW
CreatePipe
GetCPInfoExA
GetSystemWindowsDirectoryA
GetSystemWow64DirectoryA
WriteProfileSectionA
GetCalendarInfoW
DebugBreak
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointA
DebugActiveProcessStop
lstrcmpW
GetPrivateProfileSectionNamesW
IsBadHugeWritePtr
GetSystemWindowsDirectoryW
FindCloseChangeNotification
CreateActCtxW
GetPrivateProfileIntA
_lread
OutputDebugStringA
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointA
SetThreadIdealProcessor
SetConsoleActiveScreenBuffer
GetProcessAffinityMask
GlobalAddAtomA
SetConsoleWindowInfo
EndUpdateResourceA
ContinueDebugEvent
ReadConsoleA
WriteConsoleA
VirtualProtect
BuildCommDCBW
InterlockedFlushSList
DeleteCriticalSection
GetFileAttributesExA
FileTimeToLocalFileTime
GetVolumePathNameA
GetConsoleMode
HeapWalk
GetComputerNameW
FindActCtxSectionStringA
WriteProcessMemory
MoveFileExA
GetProcAddress
GetOverlappedResult
GlobalFix
UnregisterWait
FatalExit
InterlockedExchangeAdd
WaitNamedPipeW
SetSystemTime
SetLocalTime
GetPrivateProfileStructA
EnumCalendarInfoExA
OpenSemaphoreA
SetMailslotInfo
lstrcpyW
VerLanguageNameA
LockFile
EndUpdateResourceW
GetFileType
SetConsoleCP
GetConsoleAliasW
GetLargestConsoleWindowSize
WriteConsoleInputW
CreateMailslotW
EnumDateFormatsW
GetCommState
_lopen
GetConsoleAliasExesLengthA
ResetWriteWatch
GetPrivateProfileStringA
ClearCommError
CreateIoCompletionPort
DeleteAtom
ChangeTimerQueueTimer
GetFileInformationByHandle
GetLastError
SetFirmwareEnvironmentVariableA
MoveFileA
GetConsoleDisplayMode
GetSystemDefaultLangID
LocalLock
GetCommMask
SetEndOfFile
GetQueuedCompletionStatus
AreFileApisANSI
OpenWaitableTimerA
GetProcessShutdownParameters
FillConsoleOutputCharacterA
FindNextVolumeMountPointW
WriteProfileStringW
InitAtomTable
AddAtomW
WriteConsoleOutputCharacterA
QueryInformationJobObject
QueryDosDeviceW
EnterCriticalSection
VirtualAlloc
GetBinaryTypeA
CreateFileA
DeleteFileA
RaiseException
GetStartupInfoA
HeapValidate
IsBadReadPtr
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
InterlockedIncrement
ExitProcess
TlsAlloc
GetCurrentThreadId
TlsFree
SetHandleCount
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteConsoleW
LoadLibraryW
SetFilePointer
GetConsoleCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
user32
OemToCharW
winhttp
WinHttpConnect
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ