Static task
static1
Behavioral task
behavioral1
Sample
00000000.exe
Resource
win7-20220812-en
General
-
Target
00000000.exe
-
Size
740KB
-
MD5
79c3c143594bb3635fab43ee1aa86a4d
-
SHA1
680c2ae387f6f216b20f993eb6bfc6f6450382ec
-
SHA256
90e453d7ffc1f80ae55e826e424eedbb56038650bb9d72ac729d62ad828dfee3
-
SHA512
4336bdb537483010f57620308b81194e4ed8fd0c1a18c276f627235b9ff420cbe5245c38001afde956b931281895084569bb07cc0e93f2e3beaa9aeb0b8dca5f
-
SSDEEP
12288:meD12u7YVn46S/kDVIljFw0VOq2+OhV2TJI4zc5IJYIN:mhfn4lkDA9VOq2+jI4+2YG
Malware Config
Signatures
Files
-
00000000.exe.exe windows x86
50fac56420301590bb5c790f6fb6225c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
SetLastError
OutputDebugStringA
VirtualAlloc
lstrlenA
GetLastError
CloseHandle
HeapAlloc
GetProcAddress
Sleep
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetEvent
OutputDebugStringW
EncodePointer
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
RaiseException
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
GetFileType
SetFilePointerEx
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
WriteConsoleW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
CreateFileW
Sections
.text Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MTR23Ov Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ