Static task
static1
Behavioral task
behavioral1
Sample
f2ea7c7dfd895333d947d584d7264d136cf29cc0993ce7b2264b72bcac7ff2af.exe
Resource
win7-20221111-en
General
-
Target
f2ea7c7dfd895333d947d584d7264d136cf29cc0993ce7b2264b72bcac7ff2af
-
Size
600KB
-
MD5
bd9db7a16e051f7e287bbbafba2e9389
-
SHA1
0889e7fbb5d8326c26b8857a222c90b9eda200f7
-
SHA256
f2ea7c7dfd895333d947d584d7264d136cf29cc0993ce7b2264b72bcac7ff2af
-
SHA512
8b1f5922e626d1a29001ac352a4dcaad7beaa4513413d11f6fdf46f1ee029b3c1dea3fb6ec14e11ddc0a98709199a4fa4087242e046a8886f6e489cc115942bf
-
SSDEEP
12288:+foEIyN58FKzJleFLdeAjBFWaY9eH5xrjwHbCEf82YvXIDPttd:+foEIyN58FK9lM4A9FWKnH0b582mX4Vt
Malware Config
Signatures
Files
-
f2ea7c7dfd895333d947d584d7264d136cf29cc0993ce7b2264b72bcac7ff2af.exe windows x86
33fa7e83794068c3a3bf0990a3362ef7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadModule
_lwrite
MoveFileA
WideCharToMultiByte
ProcessIdToSessionId
CreateIoCompletionPort
IsValidLanguageGroup
FindFirstFileA
WriteProfileSectionW
FatalAppExitA
CreateEventW
GetCompressedFileSizeA
GetTimeFormatW
CallNamedPipeA
CompareFileTime
GetLogicalDriveStringsA
GetThreadPriorityBoost
CreateEventA
GetCurrentDirectoryA
FreeLibraryAndExitThread
GetVolumeNameForVolumeMountPointA
CreateNamedPipeA
WriteProfileSectionA
GetCurrencyFormatA
GetThreadLocale
CreateDirectoryW
FatalExit
lstrcpyA
SetCurrentDirectoryA
GetProcessWorkingSetSize
GetCommMask
GetProcessHeaps
GetCurrentProcessId
GlobalHandle
IsBadHugeWritePtr
GetPrivateProfileSectionNamesW
CreateDirectoryExA
SetThreadLocale
GetLongPathNameW
OpenFileMappingA
LockFile
GetVolumeInformationW
GetVersionExA
PrepareTape
ReadFileScatter
PeekNamedPipe
GetFileAttributesW
WaitForDebugEvent
EnumDateFormatsExA
SetTimeZoneInformation
SearchPathA
GetCommTimeouts
GetQueuedCompletionStatus
SetFileApisToANSI
GetBinaryTypeA
CreateTimerQueue
UnmapViewOfFile
TlsAlloc
DeleteVolumeMountPointA
GetSystemWindowsDirectoryW
ExpandEnvironmentStringsW
GlobalAddAtomW
GetFileSize
SystemTimeToTzSpecificLocalTime
EnumResourceLanguagesW
IsValidCodePage
FindResourceExW
FindNextChangeNotification
SetEnvironmentVariableW
GlobalGetAtomNameW
SetHandleCount
DosDateTimeToFileTime
WaitForSingleObjectEx
lstrcpynW
LockResource
EnumLanguageGroupLocalesW
BackupSeek
GetPrivateProfileSectionW
RtlUnwind
GetFullPathNameA
DeviceIoControl
GetFileAttributesA
GetTempPathW
CompareStringW
EnumResourceLanguagesA
RemoveDirectoryW
FreeUserPhysicalPages
FreeEnvironmentStringsA
GetProcessVersion
GetSystemTimeAdjustment
GetDateFormatW
CreateMailslotA
QueueUserWorkItem
SizeofResource
SetVolumeMountPointW
lstrcpynA
GetShortPathNameA
GetCurrencyFormatW
FreeLibrary
FindFirstVolumeMountPointA
Process32NextW
GetStdHandle
SetupComm
GetNamedPipeHandleStateA
SetMailslotInfo
GetDevicePowerState
CreateFileA
EndUpdateResourceA
GetVersionExW
CreateFileMappingA
GetEnvironmentVariableW
ContinueDebugEvent
GetPriorityClass
GetLogicalDrives
GetSystemDefaultLCID
FreeEnvironmentStringsW
ReplaceFileA
GetSystemTimeAsFileTime
CreateJobObjectW
_llseek
shlwapi
PathAppendA
user32
DestroyAcceleratorTable
DialogBoxIndirectParamA
GetWindowWord
VkKeyScanExA
DrawCaption
EqualRect
EnumThreadWindows
CloseWindowStation
CreateCursor
BeginPaint
DragObject
GetNextDlgGroupItem
EnumPropsW
CharNextExA
ExcludeUpdateRgn
OemKeyScan
LoadAcceleratorsW
DefMDIChildProcA
CreateDesktopA
GetClipCursor
SystemParametersInfoA
WaitMessage
DrawStateW
GetProcessDefaultLayout
DdeUninitialize
DrawFrame
GetMessageExtraInfo
Sections
.text Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ