Static task
static1
Behavioral task
behavioral1
Sample
a8c359ab3ee7933b74030bd796a0a52537344f83bff6c4135354f6979106a03d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a8c359ab3ee7933b74030bd796a0a52537344f83bff6c4135354f6979106a03d.exe
Resource
win10v2004-20220812-en
General
-
Target
a8c359ab3ee7933b74030bd796a0a52537344f83bff6c4135354f6979106a03d
-
Size
385KB
-
MD5
ffa06f234334af87d130340b4dada0e7
-
SHA1
637722f366a30f0d6f1f5c76f341b7c97b85bdb3
-
SHA256
a8c359ab3ee7933b74030bd796a0a52537344f83bff6c4135354f6979106a03d
-
SHA512
fb4dc1dfc064e02ddc09f9f648b7ab8f636f536a6068c70a53c83e3066d123e29902f1a6ffd009155b90a879bedabf57539614c2c2efe1bc84afbb8aad4258a3
-
SSDEEP
6144:650oi1EV0HU8UtZ8VIJvILD58RcBpySzdj17TfIq25cczCmDCs60WW:82HUXT8IJwWRcP9jVfIqSc4PD1x
Malware Config
Signatures
Files
-
a8c359ab3ee7933b74030bd796a0a52537344f83bff6c4135354f6979106a03d.exe windows x86
ecf40f4beb06b67c316495692fd0889e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileSectionA
GetNumaHighestNodeNumber
FindFirstVolumeW
SetConsoleCursorInfo
HeapLock
FindFirstChangeNotificationA
WaitForMultipleObjects
GetNamedPipeHandleStateW
FileTimeToDosDateTime
EnumResourceTypesW
EnumResourceNamesA
GetTimeZoneInformation
TerminateThread
WaitForMultipleObjectsEx
GetVersionExW
VerifyVersionInfoA
GetConsoleOutputCP
SetEvent
FindNextFileW
CopyFileExA
BuildCommDCBAndTimeoutsW
GetConsoleAliasesLengthA
GetCompressedFileSizeW
ReadConsoleOutputCharacterA
SetDefaultCommConfigA
VerLanguageNameW
_hread
GetCommConfig
WritePrivateProfileStructW
FreeEnvironmentStringsW
CreateTimerQueue
FindVolumeClose
ResetWriteWatch
WriteConsoleInputA
SetWaitableTimer
SetComputerNameExA
FindAtomA
ReleaseSemaphore
LocalUnlock
CallNamedPipeW
VirtualProtect
GlobalAlloc
TlsGetValue
GetProfileSectionW
GetCommandLineA
InterlockedDecrement
CopyFileA
AddRefActCtx
OutputDebugStringW
FormatMessageA
SetPriorityClass
WritePrivateProfileStringA
GetUserDefaultLCID
GlobalFix
GetVersionExA
HeapValidate
GetWindowsDirectoryW
GetStartupInfoW
ConnectNamedPipe
GetLastError
GetCalendarInfoA
DebugBreak
GetComputerNameExW
SetLastError
CopyFileW
GetCPInfoExW
GetSystemWindowsDirectoryA
GetSystemWow64DirectoryW
ContinueDebugEvent
InterlockedIncrement
GetOEMCP
GetConsoleAliasA
lstrlenA
LoadLibraryW
ReadConsoleA
WriteConsoleA
GetPrivateProfileSectionNamesA
FileTimeToSystemTime
GlobalWire
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
EnumCalendarInfoExW
SetThreadIdealProcessor
GetConsoleAliasW
GetProfileStringA
CreateIoCompletionPort
AllocConsole
AddAtomW
GetNumaNodeProcessorMask
GetConsoleAliasExesLengthW
CreateMailslotW
GetCommState
LocalFileTimeToFileTime
CheckRemoteDebuggerPresent
GetSystemTimeAdjustment
_lwrite
EnumSystemLocalesW
GetConsoleAliasExesLengthA
MoveFileW
GetWriteWatch
GetModuleHandleW
GetPrivateProfileStringA
GetProfileStringW
CreateActCtxW
GetUserDefaultLangID
IsProcessInJob
GetDevicePowerState
AreFileApisANSI
OpenWaitableTimerA
OpenFileMappingW
GetProcessHandleCount
SetUnhandledExceptionFilter
SetProcessShutdownParameters
GetNamedPipeHandleStateA
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
SetThreadPriority
InitAtomTable
AddAtomA
CreateFileA
WriteConsoleOutputCharacterW
InitializeCriticalSection
GetConsoleAliasExesA
GetBinaryTypeW
SetConsoleTextAttribute
LoadLibraryA
UnhandledExceptionFilter
DeleteFileA
RaiseException
GetStartupInfoA
IsBadReadPtr
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
GetModuleFileNameA
WriteFile
GetStdHandle
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsSetValue
TlsFree
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
CloseHandle
gdi32
GetBitmapBits
Sections
.text Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 811KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ