Static task
static1
Behavioral task
behavioral1
Sample
1a0be7412c084e2e4dfd4dce526b97602b879f78ee6bea5817d3c67b381c0c27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a0be7412c084e2e4dfd4dce526b97602b879f78ee6bea5817d3c67b381c0c27.exe
Resource
win10v2004-20220901-en
General
-
Target
1a0be7412c084e2e4dfd4dce526b97602b879f78ee6bea5817d3c67b381c0c27
-
Size
1.1MB
-
MD5
fbc8cfd01333d1abb7f1bc15d29a13a5
-
SHA1
850636e6c43c32498419309be143ca54f46c1954
-
SHA256
1a0be7412c084e2e4dfd4dce526b97602b879f78ee6bea5817d3c67b381c0c27
-
SHA512
21059d81c6137771fd900342a32acea92ff32f7290d117c43ebada0308049a8db7fbb9e17320f8228b29fc5f4bca81ee850ae7a6250b3781344e9c1b6ef28dd3
-
SSDEEP
24576:Ph/jo35ssYXKGxd6tf2aiI4H4ZLpaPPQfCI68ILiQPD:Ph/83WsY6602ZD4ZLpSIq2oiQP
Malware Config
Signatures
Files
-
1a0be7412c084e2e4dfd4dce526b97602b879f78ee6bea5817d3c67b381c0c27.exe windows x86
fc900096c6eb20e3b5a4bb6cb8449c34
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleMode
ReadConsoleInputA
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
OpenMutexA
CreateMutexA
GetModuleFileNameA
GetComputerNameA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
LCMapStringW
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
GetConsoleWindow
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetTimeZoneInformation
CloseHandle
SetFilePointer
ReadFile
InitializeCriticalSectionAndSpinCount
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoW
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFileAttributesA
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryW
GetLocaleInfoW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
CreateFileA
WriteConsoleW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetVersion
FindClose
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
GetCurrentDirectoryA
Sleep
TlsGetValue
OutputDebugStringA
GetDriveTypeW
user32
GetProcessWindowStation
GetUserObjectInformationW
GetAsyncKeyState
MessageBoxA
ShowWindow
GetDesktopWindow
advapi32
RegisterEventSourceA
GetUserNameA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ReportEventA
DeregisterEventSource
ws2_32
htons
getservbyname
inet_addr
gethostbyname
ioctlsocket
shutdown
socket
connect
WSAGetLastError
getpeername
inet_ntoa
closesocket
send
recv
select
__WSAFDIsSet
WSACleanup
gethostname
WSAStartup
WSASetLastError
Sections
.text Size: 545KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ