Static task
static1
Behavioral task
behavioral1
Sample
a11462c9d1e545b9a3172327282f1a30b801236ce4fef2b8a4149845ef1e4409.exe
Resource
win7-20221111-en
General
-
Target
a11462c9d1e545b9a3172327282f1a30b801236ce4fef2b8a4149845ef1e4409
-
Size
4.0MB
-
MD5
e006b2b08833a38314bad962b8e549eb
-
SHA1
289e9b527460258ce38402604b82ab1784b93229
-
SHA256
a11462c9d1e545b9a3172327282f1a30b801236ce4fef2b8a4149845ef1e4409
-
SHA512
2a4f4e47c909abfd6a59a38536b357d7ff84177094897ea2819fd87dfc07b239061395ce3fd5ffbbf14a2d709b34691f975adf598b7e89ee6b607289d0b87e03
-
SSDEEP
98304:rGCKnQtyq51ek1S7mP13ds372CfpMyc61mEy6Ti9Hvti2:rzKfS1ehmd3IZfpJc6HLTOHvp
Malware Config
Signatures
Files
-
a11462c9d1e545b9a3172327282f1a30b801236ce4fef2b8a4149845ef1e4409.exe windows x86
9d0bf4eae19857eee4ea363b14984987
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SleepEx
GetConsoleOutputCP
_lcreat
GetProcessPriorityBoost
FindAtomA
OpenFileMappingA
GetLongPathNameW
GetLargestConsoleWindowSize
GetConsoleAliasA
MapViewOfFile
GetNumaNodeProcessorMask
DisconnectNamedPipe
ConnectNamedPipe
OpenProcess
GetProcessAffinityMask
SetVolumeLabelA
GetPrivateProfileStringA
CreateIoCompletionPort
ClearCommError
HeapAlloc
SetConsoleWindowInfo
GetTickCount
FindFirstFileExA
LoadResource
GlobalAlloc
GetProcAddress
GetModuleHandleW
GetThreadSelectorEntry
GetExitCodeThread
GetEnvironmentVariableW
GetAtomNameA
SetConsoleScreenBufferSize
BuildCommDCBAndTimeoutsW
GetLastError
CreateMailslotW
SetPriorityClass
FindFirstVolumeMountPointA
WriteConsoleW
CloseHandle
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
HeapFree
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
RtlUnwind
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
ExitProcess
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
FatalAppExitA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
SetStdHandle
FreeLibrary
LoadLibraryW
GetConsoleCP
GetConsoleMode
CreateFileW
user32
GetCaretPos
ClientToScreen
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3.7MB - Virtual size: 43.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ