Static task
static1
Behavioral task
behavioral1
Sample
1ee8eaa2d5a11ba162d890542b8f1e5c54cfc3ff98e27e7f51fcf33f7fd6097e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1ee8eaa2d5a11ba162d890542b8f1e5c54cfc3ff98e27e7f51fcf33f7fd6097e.exe
Resource
win10v2004-20220812-en
General
-
Target
1ee8eaa2d5a11ba162d890542b8f1e5c54cfc3ff98e27e7f51fcf33f7fd6097e
-
Size
416KB
-
MD5
5ac2af7ef78cacb1e54321a938aec045
-
SHA1
949d5734c40864f7ec3b291059fa7448badf37ea
-
SHA256
1ee8eaa2d5a11ba162d890542b8f1e5c54cfc3ff98e27e7f51fcf33f7fd6097e
-
SHA512
dae6ccb702480a634fea987b2d2d876e2cd96a73345c2beb173e873eb27b5cf7bba26b74cd043a95a0e7f867aff15393903f4b70ace3280ac93a4d3d7499904c
-
SSDEEP
12288:gmNOqos4qQXvvcKKHGVuO+RfwWs3ODb3lI:vx+uOuseDbl
Malware Config
Signatures
Files
-
1ee8eaa2d5a11ba162d890542b8f1e5c54cfc3ff98e27e7f51fcf33f7fd6097e.exe windows x86
034e7f62bbbe09505661e50a80e2061e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetTapeStatus
DisconnectNamedPipe
SetStdHandle
SetSystemTimeAdjustment
OpenProcess
WTSGetActiveConsoleSessionId
EraseTape
SetTapeParameters
GetProcessPriorityBoost
GetCommTimeouts
GlobalUnWire
RequestDeviceWakeup
GetLastError
GetThreadPriority
IsWow64Process
GetWriteWatch
CreateIoCompletionPort
AssignProcessToJobObject
ConvertFiberToThread
GetCommMask
CreateTimerQueue
CancelWaitableTimer
CreateFileMappingW
GetNumaNodeProcessorMask
GetFileTime
GetExitCodeThread
FreeResource
ResetWriteWatch
SetHandleCount
SetProcessShutdownParameters
LocalUnlock
GetProcessTimes
GetFileInformationByHandle
GlobalUnlock
CreateJobSet
ClearCommError
SetEndOfFile
FlushViewOfFile
GetCommModemStatus
SetLastError
SetMessageWaitingIndicator
GetCurrentThreadId
GetTapeParameters
GetCommandLineA
GetVersionExA
GetStartupInfoA
RaiseException
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
InitializeCriticalSection
HeapAlloc
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ