Static task
static1
Behavioral task
behavioral1
Sample
b996cde80428d6224376019f84c0503c59143064e6553fb7b97ac5fe41ea8fef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b996cde80428d6224376019f84c0503c59143064e6553fb7b97ac5fe41ea8fef.exe
Resource
win10v2004-20220812-en
General
-
Target
b996cde80428d6224376019f84c0503c59143064e6553fb7b97ac5fe41ea8fef
-
Size
198KB
-
MD5
3cdf0f9b31924eb616857c3b92e01971
-
SHA1
b7839e298e70e903591129f2f02356528ebfaeb3
-
SHA256
b996cde80428d6224376019f84c0503c59143064e6553fb7b97ac5fe41ea8fef
-
SHA512
b0eac9b5087557fc56f87ad6ae45598923918cda419ba3fca0293996891cd1310832f5eeec3db78a31c4d0d63a4e3636914a982ec06e1d52f8798a6d4c7fa7b0
-
SSDEEP
3072:rQe0oQkj524uK1hOEJqTgkECMFEY//aIOVs7ocOGqvqFpwzAbl76pB:rjPV52+1ECEY//aISsTqiTE
Malware Config
Signatures
Files
-
b996cde80428d6224376019f84c0503c59143064e6553fb7b97ac5fe41ea8fef.exe windows x86
d59a7fef2374553890bc11ad99bd0ee2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
lstrcatA
SleepEx
GetConsoleFontSize
FormatMessageW
CancelWaitableTimer
CreateTimerQueue
GetOverlappedResult
CreateDirectoryExW
PeekConsoleInputW
Process32FirstW
ResetWriteWatch
BindIoCompletionCallback
GetLargestConsoleWindowSize
IsValidLocale
TransmitCommChar
FreeEnvironmentStringsW
LocalLock
EnumSystemLocalesA
UnhandledExceptionFilter
CreateJobObjectA
LeaveCriticalSection
SetMailslotInfo
DeleteTimerQueue
BackupWrite
GetPrivateProfileIntW
lstrcmp
GetSystemTimeAdjustment
WriteConsoleOutputCharacterA
CreateConsoleScreenBuffer
GetDiskFreeSpaceExA
GetConsoleAliasesA
GetNamedPipeHandleStateA
IsBadStringPtrA
WaitCommEvent
ReplaceFile
ReadDirectoryChangesW
GetProfileSectionW
WriteProfileStringW
HeapSize
GetPrivateProfileSectionNamesW
LoadResource
GetFileSize
CallNamedPipeW
SetThreadLocale
ReadConsoleA
GlobalReAlloc
GetFileAttributesW
MoveFileWithProgressW
SetInformationJobObject
Toolhelp32ReadProcessMemory
InterlockedDecrement
GlobalMemoryStatusEx
SetCommConfig
LockFile
GetMailslotInfo
Module32NextW
SetFileApisToANSI
GetVolumeInformationA
GlobalSize
GetNamedPipeInfo
EndUpdateResourceA
TlsSetValue
Heap32ListNext
WideCharToMultiByte
TransactNamedPipe
Process32Next
EnumDateFormatsExW
CreateSemaphoreW
GetProfileSectionA
_lread
GetUserDefaultLangID
SetFileApisToOEM
WritePrivateProfileSectionA
SetMessageWaitingIndicator
GetCommModemStatus
EnumDateFormatsExA
BeginUpdateResourceW
SetComputerNameA
GetVersionExA
SetThreadPriorityBoost
GetBinaryTypeA
RaiseException
PostQueuedCompletionStatus
FindFirstVolumeMountPointA
OpenProcess
PrepareTape
TerminateProcess
FindFirstVolumeMountPointW
SetCommTimeouts
GetConsoleAliasExesW
GetCPInfoExA
GetWindowsDirectoryW
ChangeTimerQueueTimer
_llseek
GetCompressedFileSizeW
LocalFree
GetPrivateProfileSectionW
GetCurrentProcessId
GetStartupInfoW
GetNamedPipeHandleStateW
CompareStringA
SetCalendarInfoW
SetConsoleCursor
GetTapePosition
CreateProcessA
GetTimeFormatA
OpenSemaphoreA
DebugActiveProcess
DefineDosDeviceA
BuildCommDCBW
GetThreadContext
FindClose
GetFileAttributesA
SetConsoleCtrlHandler
_lopen
GetConsoleAliasesLengthA
EnumSystemLanguageGroupsA
GetThreadPriority
VirtualQuery
IsBadHugeReadPtr
UnlockFile
CallNamedPipeA
WriteTapemark
VirtualProtectEx
SetSystemTimeAdjustment
EnumSystemCodePagesA
GetCommMask
CancelDeviceWakeupRequest
SetDefaultCommConfigA
CreateHardLinkW
CreateIoCompletionPort
GetDateFormatA
QueueUserWorkItem
BackupRead
VirtualFreeEx
VirtualUnlock
CancelTimerQueueTimer
GetConsoleOutputCP
SetHandleInformation
GetConsoleCursorInfo
CreateTimerQueueTimer
GetSystemDefaultLangID
GetNumberOfConsoleInputEvents
QueryInformationJobObject
CreateHardLinkA
EnumCalendarInfoExA
SetEndOfFile
GetFileSizeEx
GetNumberFormatW
MapUserPhysicalPages
OpenEventA
SetConsoleCursorPosition
GetDateFormatW
WriteConsoleOutputW
SetUnhandledExceptionFilter
WinExec
FreeEnvironmentStringsA
DebugBreak
CopyFileW
FindAtomA
GlobalFree
QueryPerformanceFrequency
lstrcat
InterlockedCompareExchange
CreateEventW
HeapFree
GetConsoleAliasesLengthW
SetCommBreak
OpenSemaphoreW
SetConsoleTextAttribute
GetBinaryType
GetCPInfo
ReadConsoleOutputA
SetFilePointer
GetPrivateProfileSectionA
SetConsoleActiveScreenBuffer
GetConsoleCP
GetDriveTypeA
GetProcAddress
IsBadWritePtr
GetLogicalDriveStringsA
DeleteTimerQueueTimer
GetThreadTimes
FlushFileBuffers
DefineDosDeviceW
WriteFile
WriteConsoleA
EnumResourceTypesA
Heap32First
GlobalAlloc
IsSystemResumeAutomatic
ScrollConsoleScreenBufferA
LocalFlags
FindFirstFileW
SetConsoleCursorInfo
OpenFileMappingW
AreFileApisANSI
GetBinaryTypeW
lstrlen
GlobalFindAtomA
LocalSize
FindFirstFileA
InterlockedIncrement
GetConsoleTitleA
GetProfileIntA
VirtualFree
WriteProfileStringA
GetLastError
DeleteFileA
SetLocalTime
GenerateConsoleCtrlEvent
InterlockedExchangeAdd
GetShortPathNameW
EnumTimeFormatsA
Thread32Next
BuildCommDCBAndTimeoutsA
SetFilePointerEx
GetCommConfig
InitAtomTable
GetOEMCP
GetFileTime
lstrlenW
EnumDateFormatsW
InitializeCriticalSectionAndSpinCount
GetConsoleTitleW
GetVolumeInformationW
FatalAppExitA
HeapLock
EnumUILanguagesW
SetConsoleTitleA
GlobalFix
SizeofResource
VerSetConditionMask
SetVolumeLabelA
MultiByteToWideChar
FindFirstFileExW
GetSystemTimeAsFileTime
EnumTimeFormatsW
_hread
GetConsoleAliasW
WaitForSingleObject
FindResourceExW
ExitProcess
GetProcessTimes
GetTempFileNameW
SetFileAttributesA
OutputDebugStringA
GetCurrentDirectoryW
QueueUserAPC
PeekConsoleInputA
lstrcmpiA
GetProcessIoCounters
GetCommProperties
FindCloseChangeNotification
WaitForDebugEvent
EnumResourceNamesA
UnregisterWaitEx
SetCalendarInfoA
FoldStringW
MapUserPhysicalPagesScatter
FreeLibrary
VirtualQueryEx
ReadFileEx
GetCompressedFileSizeA
FindFirstFileExA
UnlockFileEx
ReadProcessMemory
ExitThread
FindFirstVolumeA
_lwrite
_lcreat
CreateRemoteThread
Heap32Next
SetDefaultCommConfigW
GetLogicalDrives
CreatePipe
WaitForMultipleObjectsEx
IsProcessorFeaturePresent
IsDebuggerPresent
MulDiv
TerminateJobObject
Module32First
GetConsoleAliasA
CreateTapePartition
GetTempFileNameA
GetTapeParameters
SetFileTime
CloseHandle
GetEnvironmentVariableW
RtlZeroMemory
DeleteVolumeMountPointA
FindAtomW
DeviceIoControl
WritePrivateProfileStringW
WriteFileGather
RemoveDirectoryA
SetPriorityClass
CopyFileExW
CancelIo
GetLocalTime
ReleaseMutex
GetPrivateProfileStructW
GetTempPathA
LoadLibraryExW
OpenWaitableTimerW
lstrcmpW
CreateFileA
GetDiskFreeSpaceW
GetCurrentDirectoryA
GetCurrentConsoleFont
Process32First
LockResource
SetThreadAffinityMask
PulseEvent
VerifyVersionInfoW
HeapAlloc
GetLocaleInfoW
SuspendThread
CreateMailslotW
Heap32ListFirst
VirtualLock
CopyFileA
WriteConsoleOutputCharacterW
GetDiskFreeSpaceA
WriteFileEx
HeapReAlloc
GetProfileStringW
Process32NextW
SetProcessWorkingSetSize
MapViewOfFileEx
EnumLanguageGroupLocalesA
EnumCalendarInfoA
GetConsoleScreenBufferInfo
IsBadCodePtr
GetSystemDirectoryW
GetEnvironmentVariableA
EnumResourceNamesW
DeleteCriticalSection
Module32Next
EnumUILanguagesA
OpenMutexW
GetSystemDirectoryA
GlobalLock
EnumCalendarInfoW
TryEnterCriticalSection
SetEvent
ExpandEnvironmentStringsW
WriteConsoleOutputAttribute
GetVolumePathNameW
GetTempPathW
FindNextFileW
SearchPathW
GlobalGetAtomNameA
WritePrivateProfileStructA
FillConsoleOutputCharacterW
MoveFileA
GetComputerNameA
MoveFileWithProgressA
CopyFileExA
ReadConsoleW
GetTickCount
SetErrorMode
GetPrivateProfileStringW
CompareStringW
ClearCommBreak
GetFileAttributesExW
Thread32First
HeapCreate
FileTimeToDosDateTime
GetCPInfoExW
GetCurrentProcess
ClearCommError
GetComputerNameW
MoveFileExA
ReadConsoleOutputCharacterA
GlobalHandle
UnregisterWait
FoldStringA
GetDefaultCommConfigW
FindNextVolumeMountPointW
SetEnvironmentVariableW
MapViewOfFile
FindNextChangeNotification
RtlFillMemory
ReplaceFileA
LocalHandle
GetLocaleInfoA
GetSystemInfo
_lclose
lstrcpyW
AddConsoleAliasW
SetThreadContext
LoadModule
GetPrivateProfileSectionNamesA
SetConsoleTitleW
CreateDirectoryA
EnumLanguageGroupLocalesW
CreateFiber
SetProcessPriorityBoost
SetComputerNameExW
GlobalDeleteAtom
SetNamedPipeHandleState
FillConsoleOutputCharacterA
GetLongPathNameW
GetConsoleAliasExesLengthA
SetProcessAffinityMask
DnsHostnameToComputerNameA
CreateToolhelp32Snapshot
SetCriticalSectionSpinCount
GetNumberFormatA
SearchPathA
SetHandleCount
Module32FirstW
SwitchToThread
SetVolumeLabelW
GetDriveTypeW
GetStringTypeA
CreateEventA
CreateWaitableTimerW
GetStringTypeExA
ResetEvent
CreateNamedPipeW
LocalCompact
GetPriorityClass
SetCommState
IsBadStringPtrW
OpenWaitableTimerA
GetFullPathNameW
SetConsoleOutputCP
SetTapePosition
GetStringTypeExW
BeginUpdateResourceA
CommConfigDialogA
FileTimeToSystemTime
TlsAlloc
WriteConsoleInputW
GetCommandLineW
ConvertThreadToFiber
GetEnvironmentStrings
SetVolumeMountPointA
SetSystemPowerState
lstrcmpiW
GetExitCodeThread
FindVolumeMountPointClose
CreateMutexA
GetProcessVersion
SetEnvironmentVariableA
LCMapStringW
SetLocaleInfoW
WritePrivateProfileSectionW
RequestDeviceWakeup
ReadFile
GetModuleFileNameA
GetEnvironmentStringsW
GetFileType
HeapDestroy
LoadLibraryA
GetACP
VirtualAlloc
RtlUnwind
LoadLibraryW
QueryPerformanceCounter
GetCurrentThreadId
user32
wsprintfW
GetSysColor
gdi32
GetStockObject
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
Sections
.text2 Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata3 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata2 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ