Static task
static1
Behavioral task
behavioral1
Sample
a612ae524e9fce3dc09c2235ae00baab.exe
Resource
win7-20221111-en
General
-
Target
a612ae524e9fce3dc09c2235ae00baab.exe
-
Size
200KB
-
MD5
a612ae524e9fce3dc09c2235ae00baab
-
SHA1
ed955ca8d4176b3eaf0221ce913abae2cd59cb4b
-
SHA256
e909a1e96eedbd51f0b72959a01335aedb816657d33859272174590e75434690
-
SHA512
76de329f9bf4ce90b3c6124b31c7841feaf1b062cd720613e97876e43f50968c0835bae6dc03515c4d83dd4254d289958ac50b9441cd62b2fdbc4866b278c2ef
-
SSDEEP
3072:CZVR496h5b37q8Fc75p9cFkL+KBNyBNzv82Xy8BF9vxEPcdEj:AHi8Fc9peFkLDUxzpBFDA
Malware Config
Signatures
Files
-
a612ae524e9fce3dc09c2235ae00baab.exe.exe windows x86
3874ff9f3ac300d09d69e1a8ccc85e9a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcessStop
UnlockFile
CloseHandle
CreateMailslotW
lstrcpynA
lstrlenA
LoadLibraryA
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetLastError
GetVolumeNameForVolumeMountPointA
WTSGetActiveConsoleSessionId
GetNumberFormatA
PeekConsoleInputW
CreateFileW
GetStringTypeW
OutputDebugStringW
WriteConsoleW
SetFilePointerEx
SetStdHandle
HeapReAlloc
TerminateProcess
LocalAlloc
GlobalAlloc
GetFileAttributesExW
GetProcAddress
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetCommandLineW
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
DeleteCriticalSection
ReadFile
ReadConsoleW
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetEndOfFile
user32
GetMenuItemInfoW
AttachThreadInput
GetClassInfoW
SetDlgItemInt
MessageBeep
ChangeMenuW
gdi32
SetMapMode
SetMapperFlags
ResizePalette
SetEnhMetaFileBits
winhttp
WinHttpOpen
WinHttpCloseHandle
WinHttpSetCredentials
msimg32
GradientFill
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ