Static task
static1
Behavioral task
behavioral1
Sample
extracted_at_0x0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
extracted_at_0x0.exe
Resource
win10v2004-20220901-en
General
-
Target
extracted_at_0x0.exe
-
Size
117KB
-
MD5
fda906bee815ff6f8dada7406ce1799d
-
SHA1
acda1f9b3c9b9e66857d04df0540c2224da325a4
-
SHA256
00dfa5ffcc6c024a8c0c8f00a9cf388ead0dd47617dc341dd4df5874b68bd54e
-
SHA512
701ef70e079908e8f0fd774b9b87b88f5dd95e3cd2a7f14d96cce0bef140b5cb372f64cada3795508e602ea3cee88257fac01028d31e11d0f894a765098fa4d0
-
SSDEEP
3072:gAF33Cr7dGXMgL/66TpaHAL51GLJDtFS09x+:bc7WL98U5O9G
Malware Config
Signatures
Files
-
extracted_at_0x0.exe.exe windows x64
29e864ceeed4763638faaa819e2aa8a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
InitCommonControlsEx
kernel32
Sleep
GlobalFree
ReadFile
GlobalAlloc
GetMailslotInfo
CreateEventA
CreateMutexA
CreateThread
GetVersionExA
GetComputerNameA
FlushFileBuffers
CreateFileA
LocalUnlock
CreateMailslotA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
MultiByteToWideChar
HeapSize
LocalLock
LocalAlloc
GetEnvironmentVariableA
LocalFree
GetLastError
CloseHandle
HeapReAlloc
GetOEMCP
GetACP
HeapFree
HeapAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSetInformation
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlVirtualUnwind
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
user32
LoadMenuA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
DefFrameProcA
MessageBoxA
MessageBoxW
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
GetParent
GetSubMenu
SendMessageA
EnableMenuItem
DrawMenuBar
GetClientRect
MoveWindow
DefMDIChildProcA
GetWindowLongA
gdi32
GetStockObject
advapi32
CloseServiceHandle
OpenSCManagerA
EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
shell32
Shell_NotifyIconA
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ