Static task
static1
Behavioral task
behavioral1
Sample
a96e976e9203715a979a2868294a780e71fade7fcd9db7900cc33ac1a42a39cf.exe
Resource
win7-20220901-en
General
-
Target
a96e976e9203715a979a2868294a780e71fade7fcd9db7900cc33ac1a42a39cf
-
Size
570KB
-
MD5
8f373765641d76c8e5cc1516a9bd5bdf
-
SHA1
2818927b23aaf3012a99692cf256f400bd5228ed
-
SHA256
a96e976e9203715a979a2868294a780e71fade7fcd9db7900cc33ac1a42a39cf
-
SHA512
3f8975252d931f142446dcc58bd333363312143fbdb51af568f2cebbbd7c949d009d01eda8d851c10aaa1f18a5f3f27b832b90b27d5bd54bf0b5ac5cf90829e2
-
SSDEEP
12288:tKzwdTi8/rjoklvzkA/yXNR7LkkkkkkkkkkkkkkUkkkkkkkkkkkkkkkkkkkkkkkq:tKzwdTi8DcqLxyXPvkkkkkkkkkkkkkk6
Malware Config
Signatures
Files
-
a96e976e9203715a979a2868294a780e71fade7fcd9db7900cc33ac1a42a39cf.exe windows x86
672faeda1845c3daf839dfc76d6407b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetCommandLineW
GetModuleHandleW
CreateEventW
SetEvent
QueueUserWorkItem
EnterCriticalSection
LeaveCriticalSection
CloseHandle
UnregisterWait
GetLastError
ConnectNamedPipe
ResetEvent
GetOverlappedResult
ReadFile
DisconnectNamedPipe
DuplicateHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
ReleaseMutex
UnregisterWaitEx
InitializeCriticalSection
RegisterWaitForSingleObject
WriteFile
CreateNamedPipeW
CreateMutexW
OpenProcess
ReadProcessMemory
GetSystemTimeAsFileTime
LoadLibraryW
GetProcAddress
FreeLibrary
CreateFileW
GetSystemTime
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
GetTickCount
WaitForSingleObject
GetModuleFileNameW
SetFilePointer
OutputDebugStringA
InterlockedCompareExchange
InterlockedExchange
LocalFree
IsDebuggerPresent
RaiseException
GetSystemDirectoryW
GetWindowsDirectoryW
DeleteFileW
GetTempPathW
GetCurrentDirectoryW
GetVersionExW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
LCMapStringA
LCMapStringW
GetCPInfo
RtlUnwind
GetStringTypeA
GetStringTypeW
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetLocaleInfoA
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
InterlockedDecrement
GetFileAttributesW
InterlockedIncrement
user32
PostQuitMessage
DefWindowProcW
UpdateWindow
RegisterClassExW
PostMessageW
DispatchMessageW
GetMessageW
TranslateMessage
CreateWindowExW
wininet
InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
InternetCrackUrlW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCloseHandle
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
SHGetFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ