Static task
static1
Behavioral task
behavioral1
Sample
90857805c139b3acea91fe38a49db3a50281d2f9e6f1f3af63770736225f44be.exe
Resource
win7-20221111-en
General
-
Target
90857805c139b3acea91fe38a49db3a50281d2f9e6f1f3af63770736225f44be
-
Size
175KB
-
MD5
f5398dfb74426c0499f304a82b60b4a2
-
SHA1
eba64c316f798902fe007fc3b87392621d6129eb
-
SHA256
90857805c139b3acea91fe38a49db3a50281d2f9e6f1f3af63770736225f44be
-
SHA512
6b91b63976a496ce0961b4f9dcd673ed1a079f2af024f8d19c98001161b34b9ff2c2877354ae30d2dd710e7ab22306c0810e70baae6ebcf91c705f19418a5ff9
-
SSDEEP
3072:0zuyDUVOpihyZEw3Q9jyLeMPlZHFmxRo1yzGco8uhMPZ:0zuyYVlhyewA9eLeMfFYRo1c+S
Malware Config
Signatures
Files
-
90857805c139b3acea91fe38a49db3a50281d2f9e6f1f3af63770736225f44be.exe windows x86
0f3406929dec9eba9918b25f2a9c345f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
Imports
kernel32
GetProcessHeap
SetEndOfFile
HeapReAlloc
HeapSize
FlushFileBuffers
SetStdHandle
WriteConsoleW
SetFilePointer
Sleep
HeapFree
GetStringTypeW
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
LoadLibraryW
FormatMessageA
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
RtlUnwind
InitializeCriticalSectionAndSpinCount
LocalFree
CloseHandle
GetCurrentThreadId
ConvertDefaultLocale
LocalAlloc
GetLastError
GlobalUnlock
lstrlenW
MultiByteToWideChar
CompareStringW
ReadFile
GetExitCodeProcess
HeapCreate
QueryPerformanceCounter
GlobalAlloc
GlobalLock
HeapAlloc
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetFileSize
CreateFileA
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
GetModuleHandleW
GetProcAddress
user32
ReleaseDC
RegisterClipboardFormatA
GetWindowTextA
GetMenu
GetDC
BeginPaint
SendMessageA
GetProcessWindowStation
GetFocus
GetWindow
EndDialog
DefWindowProcA
LoadImageA
IsWindowVisible
GetSystemMetrics
AppendMenuA
GetMenuItemInfoA
CreatePopupMenu
GetUserObjectInformationA
CopyImage
GetWindowRect
SendDlgItemMessageA
GetWindowDC
GetThreadDesktop
EnumDesktopsA
gdi32
SetTextColor
DeleteDC
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetKerningPairsA
CreateCompatibleBitmap
SetTextJustification
GetObjectA
CreateSolidBrush
BitBlt
advapi32
CopySid
GetLengthSid
GetTokenInformation
ole32
CreateStreamOnHGlobal
ReleaseStgMedium
oleaut32
OleSavePictureFile
OleLoadPicture
credui
CredUIParseUserNameA
gdiplus
GdipFree
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetDpiX
GdipAlloc
GdiplusStartup
GdipCloneImage
GdipCreateFromHDC
GdipDisposeImage
wsnmp32
ord320
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ