_gifgeek@8
Static task
static1
Behavioral task
behavioral1
Sample
c381017d9dd410d963c0ad37c07266cbd77fc1244d1d8aa2a841a441001e7f6e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c381017d9dd410d963c0ad37c07266cbd77fc1244d1d8aa2a841a441001e7f6e.exe
Resource
win10v2004-20220812-en
General
-
Target
c381017d9dd410d963c0ad37c07266cbd77fc1244d1d8aa2a841a441001e7f6e
-
Size
3.8MB
-
MD5
b6a4e58fd95d8790b2b12c3f389317ff
-
SHA1
b2733c486acf7c3cbb2cff39323d17ca3d0068d9
-
SHA256
c381017d9dd410d963c0ad37c07266cbd77fc1244d1d8aa2a841a441001e7f6e
-
SHA512
1b56e7ded0234533d594b814e5f9715c947ae30545f2b9e9816910340c05d9c04ad541f6875157fdd7e1411055f8b69844e1e6d8c4c9cae5a0c477f855846a7c
-
SSDEEP
98304:LYwq4CaI2iX2HTR0Z3FyprqMhWSce9XFlY6+KK:LG4CaEaOZ3KrqjwBcK
Malware Config
Signatures
Files
-
c381017d9dd410d963c0ad37c07266cbd77fc1244d1d8aa2a841a441001e7f6e.exe windows x86
ae744c11935284ac6be0b4c3c4a9a70a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesW
SearchPathW
SetPriorityClass
SetFilePointer
SetLocalTime
BuildCommDCBAndTimeoutsA
LoadResource
SetUnhandledExceptionFilter
InterlockedIncrement
ReadConsoleA
CompareFileTime
SetDefaultCommConfigW
SetEnvironmentVariableW
WaitForSingleObject
CallNamedPipeW
SetTapeParameters
GetModuleHandleW
IsBadReadPtr
SetCommState
Sleep
CopyFileW
GetPrivateProfileStructW
SetSystemTimeAdjustment
FileTimeToDosDateTime
GetACP
lstrlenW
DisconnectNamedPipe
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
SetStdHandle
SetFileApisToOEM
LoadLibraryA
CreateSemaphoreW
LocalAlloc
WaitForMultipleObjects
_lread
lstrcatW
FreeEnvironmentStringsW
FindAtomW
GetProfileSectionW
lstrcpyA
GetFileAttributesA
ExitProcess
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetLastError
DeleteFileA
GetModuleFileNameW
GetStartupInfoW
HeapValidate
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
DebugBreak
GetStdHandle
WriteFile
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
FlushFileBuffers
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetModuleHandleA
CloseHandle
CreateFileA
Exports
Exports
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ