Static task
static1
Behavioral task
behavioral1
Sample
dc12865c19fe4d2472ba20a70c00d45bc2bbed738c941a87749eb425681fb68e.exe
Resource
win7-20221111-en
General
-
Target
dc12865c19fe4d2472ba20a70c00d45bc2bbed738c941a87749eb425681fb68e
-
Size
257KB
-
MD5
5843ad4f497c40eba1b6c1567116aae6
-
SHA1
7e0f4c017224f4bf2574a84c6dbf62112474beb4
-
SHA256
8ce20c2b15b2c967480f7082645c7e5b343ebd5b57d0b57a0b7f756da823fa6e
-
SHA512
8446bfef0bd9a45ec6815a71c2545c66bcce134564040d6d66a040f6152eee6f130dda0b5985425df4821a8568af77778e845c76850f26b33dad46fafa874513
-
SSDEEP
6144:J0uWb/EyygC7zGlOIPn8UY9M2WCw6xgzDNjE8HY:yu6Myyt7zvknqql6QE/
Malware Config
Signatures
Files
-
dc12865c19fe4d2472ba20a70c00d45bc2bbed738c941a87749eb425681fb68e.zip
-
dc12865c19fe4d2472ba20a70c00d45bc2bbed738c941a87749eb425681fb68e.exe windows x86
44e2cf537ef064c2de9a4b8099505d12
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
GetModuleHandleA
CreateDirectoryExW
ReadConsoleInputA
GetTempPathA
GetSystemDirectoryW
RemoveDirectoryA
OutputDebugStringA
GetProcAddress
LocalAlloc
ExitThread
GetCurrentProcess
RtlCaptureContext
InterlockedDecrement
GetFileTime
lstrcatA
GetBinaryTypeA
SearchPathW
AddConsoleAliasW
SetProcessPriorityBoost
EndUpdateResourceA
FindNextFileA
FindFirstVolumeA
LocalShrink
GlobalFlags
_llseek
UpdateResourceW
CreateActCtxW
CopyFileW
FindFirstFileW
FreeEnvironmentStringsW
SetErrorMode
InterlockedIncrement
MoveFileWithProgressW
GetTickCount
SetLastError
GetPrivateProfileStructA
VerifyVersionInfoA
LoadLibraryA
GetLastError
HeapReAlloc
HeapAlloc
DeleteFileA
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
CreateFileA
CloseHandle
FlushFileBuffers
gdi32
SetBrushOrgEx
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 190KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ