Static task
static1
Behavioral task
behavioral1
Sample
93b0ae5a699fd3d832ae5c22b6f3100fc8121fc7e74d555706f06d5f7fc208ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93b0ae5a699fd3d832ae5c22b6f3100fc8121fc7e74d555706f06d5f7fc208ff.exe
Resource
win10v2004-20220812-en
General
-
Target
93b0ae5a699fd3d832ae5c22b6f3100fc8121fc7e74d555706f06d5f7fc208ff
-
Size
137KB
-
MD5
ac113bf4e04bf322965bdb80b5459163
-
SHA1
09fffa87f52baff3b44d1af4d89001fccfc11246
-
SHA256
93b0ae5a699fd3d832ae5c22b6f3100fc8121fc7e74d555706f06d5f7fc208ff
-
SHA512
8b75c034c4b5d8d72e54059d21eb98d89aae3e35e62f5f0ce8fde28322ad60a3f4fbc61e70e6c6d2d7fedf3c486460709a610b1c0d7ca359e68d2421c8a64cbf
-
SSDEEP
3072:l1UXWO+DFN0xU53b8GSWZQ6Y5K6woesjS:DU0FNzwBh3QloeR
Malware Config
Signatures
Files
-
93b0ae5a699fd3d832ae5c22b6f3100fc8121fc7e74d555706f06d5f7fc208ff.exe windows x86
92447a6660ff9b7cf33874b356740e02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleCreateLinkToFileEx
ReadFmtUserTypeStg
OleLockRunning
CoResumeClassObjects
CoGetCallContext
OleLoad
kernel32
GetModuleFileNameA
CreateFileW
WriteConsoleW
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetProcAddress
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
MultiByteToWideChar
CloseHandle
CreateFileA
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetFilePointer
HeapSize
ReadFile
SetStdHandle
SetEndOfFile
GetProcessHeap
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ