Static task
static1
Behavioral task
behavioral1
Sample
1fc4997ee696465f16dae57509ba5837ca351712ed4126cba2b2367c616a68ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1fc4997ee696465f16dae57509ba5837ca351712ed4126cba2b2367c616a68ad.exe
Resource
win10v2004-20220812-en
General
-
Target
1fc4997ee696465f16dae57509ba5837ca351712ed4126cba2b2367c616a68ad
-
Size
191KB
-
MD5
a3b8641a927d14eb1d40f703392080e5
-
SHA1
4b6c4157ce9089b9d3f24ac588552519709dd84e
-
SHA256
1fc4997ee696465f16dae57509ba5837ca351712ed4126cba2b2367c616a68ad
-
SHA512
6c9994306fd2f09df92a50cf5a91d7d77f32845adca9cae94feec2d7126d4834a50de2581e01b09cae30b8da3de2e61fbd08036932f224b9d7adae92af22fa00
-
SSDEEP
3072:LpGs3Qkj524uK1hbORQRB0uCMotd5T2/Ap+9Cq6OwZpwzOI:LYYV52+18OBZV0PK8BL
Malware Config
Signatures
Files
-
1fc4997ee696465f16dae57509ba5837ca351712ed4126cba2b2367c616a68ad.exe windows x86
4e731a077b929493d5ade9013c1c2b7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
lstrcatA
SleepEx
GetConsoleFontSize
FormatMessageW
CancelWaitableTimer
CreateTimerQueue
GetOverlappedResult
CreateDirectoryExW
PeekConsoleInputW
Process32FirstW
ResetWriteWatch
BindIoCompletionCallback
GetLargestConsoleWindowSize
IsValidLocale
TransmitCommChar
FreeEnvironmentStringsW
LocalLock
EnumSystemLocalesA
UnhandledExceptionFilter
CreateJobObjectA
LeaveCriticalSection
SetMailslotInfo
DeleteTimerQueue
BackupWrite
GetPrivateProfileIntW
lstrcmp
GetSystemTimeAdjustment
WriteConsoleOutputCharacterA
CreateConsoleScreenBuffer
GetDiskFreeSpaceExA
GetConsoleAliasesA
GetNamedPipeHandleStateA
IsBadStringPtrA
WaitCommEvent
ReplaceFile
ReadDirectoryChangesW
GetProfileSectionW
WriteProfileStringW
HeapSize
GetPrivateProfileSectionNamesW
LoadResource
GetFileSize
CallNamedPipeW
SetThreadLocale
ReadConsoleA
GlobalReAlloc
GetFileAttributesW
MoveFileWithProgressW
SetInformationJobObject
Toolhelp32ReadProcessMemory
InterlockedDecrement
GlobalMemoryStatusEx
SetCommConfig
LockFile
GetMailslotInfo
Module32NextW
SetFileApisToANSI
GetVolumeInformationA
GlobalSize
GetNamedPipeInfo
EndUpdateResourceA
TlsSetValue
Heap32ListNext
WideCharToMultiByte
TransactNamedPipe
Process32Next
EnumDateFormatsExW
CreateSemaphoreW
GetProfileSectionA
_lread
GetUserDefaultLangID
SetFileApisToOEM
WritePrivateProfileSectionA
SetMessageWaitingIndicator
GetCommModemStatus
EnumDateFormatsExA
BeginUpdateResourceW
SetComputerNameA
GetVersionExA
SetThreadPriorityBoost
GetBinaryTypeA
RaiseException
PostQueuedCompletionStatus
FindFirstVolumeMountPointA
OpenProcess
PrepareTape
TerminateProcess
FindFirstVolumeMountPointW
SetCommTimeouts
GetConsoleAliasExesW
GetCPInfoExA
GetWindowsDirectoryW
ChangeTimerQueueTimer
_llseek
GetCompressedFileSizeW
LocalFree
GetPrivateProfileSectionW
GetCurrentProcessId
GetStartupInfoW
GetNamedPipeHandleStateW
CompareStringA
SetCalendarInfoW
SetConsoleCursor
GetTapePosition
CreateProcessA
GetTimeFormatA
OpenSemaphoreA
DebugActiveProcess
DefineDosDeviceA
BuildCommDCBW
GetThreadContext
FindClose
GetFileAttributesA
SetConsoleCtrlHandler
_lopen
GetConsoleAliasesLengthA
EnumSystemLanguageGroupsA
GetThreadPriority
VirtualQuery
IsBadHugeReadPtr
UnlockFile
CallNamedPipeA
WriteTapemark
VirtualProtectEx
SetSystemTimeAdjustment
EnumSystemCodePagesA
GetCommMask
CancelDeviceWakeupRequest
SetDefaultCommConfigA
CreateHardLinkW
CreateIoCompletionPort
GetDateFormatA
QueueUserWorkItem
BackupRead
VirtualFreeEx
VirtualUnlock
CancelTimerQueueTimer
GetConsoleOutputCP
SetHandleInformation
GetConsoleCursorInfo
CreateTimerQueueTimer
GetSystemDefaultLangID
GetNumberOfConsoleInputEvents
QueryInformationJobObject
CreateHardLinkA
EnumCalendarInfoExA
SetEndOfFile
GetFileSizeEx
GetNumberFormatW
MapUserPhysicalPages
OpenEventA
SetConsoleCursorPosition
GetDateFormatW
WriteConsoleOutputW
SetUnhandledExceptionFilter
WinExec
FreeEnvironmentStringsA
DebugBreak
CopyFileW
FindAtomA
GlobalFree
QueryPerformanceFrequency
lstrcat
InterlockedCompareExchange
CreateEventW
HeapFree
GetConsoleAliasesLengthW
SetCommBreak
OpenSemaphoreW
SetConsoleTextAttribute
GetBinaryType
GetCPInfo
ReadConsoleOutputA
SetFilePointer
GetPrivateProfileSectionA
SetConsoleActiveScreenBuffer
GetConsoleCP
GetDriveTypeA
GetProcAddress
IsBadWritePtr
GetLogicalDriveStringsA
DeleteTimerQueueTimer
GetThreadTimes
FlushFileBuffers
DefineDosDeviceW
WriteFile
WriteConsoleA
EnumResourceTypesA
Heap32First
GlobalAlloc
IsSystemResumeAutomatic
ScrollConsoleScreenBufferA
LocalFlags
FindFirstFileW
SetConsoleCursorInfo
OpenFileMappingW
AreFileApisANSI
GetBinaryTypeW
lstrlen
GlobalFindAtomA
LocalSize
FindFirstFileA
InterlockedIncrement
GetConsoleTitleA
GetProfileIntA
VirtualFree
WriteProfileStringA
GetLastError
DeleteFileA
SetLocalTime
GenerateConsoleCtrlEvent
InterlockedExchangeAdd
GetShortPathNameW
EnumTimeFormatsA
Thread32Next
BuildCommDCBAndTimeoutsA
SetFilePointerEx
GetCommConfig
InitAtomTable
GetOEMCP
GetFileTime
lstrlenW
EnumDateFormatsW
InitializeCriticalSectionAndSpinCount
GetConsoleTitleW
GetVolumeInformationW
FatalAppExitA
HeapLock
EnumUILanguagesW
SetConsoleTitleA
GlobalFix
SizeofResource
VerSetConditionMask
SetVolumeLabelA
MultiByteToWideChar
FindFirstFileExW
GetSystemTimeAsFileTime
EnumTimeFormatsW
_hread
GetConsoleAliasW
WaitForSingleObject
FindResourceExW
ExitProcess
GetProcessTimes
GetTempFileNameW
SetFileAttributesA
OutputDebugStringA
GetCurrentDirectoryW
QueueUserAPC
PeekConsoleInputA
lstrcmpiA
GetProcessIoCounters
GetCommProperties
FindCloseChangeNotification
WaitForDebugEvent
EnumResourceNamesA
UnregisterWaitEx
SetCalendarInfoA
FoldStringW
MapUserPhysicalPagesScatter
FreeLibrary
VirtualQueryEx
ReadFileEx
GetCompressedFileSizeA
FindFirstFileExA
UnlockFileEx
ReadProcessMemory
ExitThread
FindFirstVolumeA
_lwrite
_lcreat
CreateRemoteThread
Heap32Next
SetDefaultCommConfigW
GetLogicalDrives
CreatePipe
WaitForMultipleObjectsEx
IsProcessorFeaturePresent
IsDebuggerPresent
MulDiv
TerminateJobObject
Module32First
GetConsoleAliasA
CreateTapePartition
GetTempFileNameA
GetTapeParameters
SetFileTime
CloseHandle
GetEnvironmentVariableW
RtlZeroMemory
DeleteVolumeMountPointA
FindAtomW
DeviceIoControl
WritePrivateProfileStringW
WriteFileGather
RemoveDirectoryA
SetPriorityClass
CopyFileExW
CancelIo
GetLocalTime
ReleaseMutex
GetPrivateProfileStructW
GetTempPathA
LoadLibraryExW
OpenWaitableTimerW
lstrcmpW
CreateFileA
GetDiskFreeSpaceW
GetCurrentDirectoryA
GetCurrentConsoleFont
Process32First
LockResource
SetThreadAffinityMask
PulseEvent
VerifyVersionInfoW
HeapAlloc
GetLocaleInfoW
SuspendThread
CreateMailslotW
Heap32ListFirst
VirtualLock
CopyFileA
WriteConsoleOutputCharacterW
GetDiskFreeSpaceA
WriteFileEx
HeapReAlloc
GetProfileStringW
Process32NextW
SetProcessWorkingSetSize
MapViewOfFileEx
EnumLanguageGroupLocalesA
EnumCalendarInfoA
GetConsoleScreenBufferInfo
IsBadCodePtr
GetSystemDirectoryW
GetEnvironmentVariableA
EnumResourceNamesW
DeleteCriticalSection
Module32Next
EnumUILanguagesA
OpenMutexW
GetSystemDirectoryA
GlobalLock
EnumCalendarInfoW
TryEnterCriticalSection
SetEvent
ExpandEnvironmentStringsW
WriteConsoleOutputAttribute
GetVolumePathNameW
GetTempPathW
FindNextFileW
SearchPathW
GlobalGetAtomNameA
WritePrivateProfileStructA
FillConsoleOutputCharacterW
MoveFileA
ReadFile
LoadLibraryA
user32
GetSysColor
gdi32
GetStockObject
advapi32
RegOpenKeyExW
RegQueryValueExW
Sections
.text2 Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata3 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata2 Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ