Static task
static1
Behavioral task
behavioral1
Sample
75d999d431819311abf8bd048cd084acdcd5f4e1.exe
Resource
win7-20221111-en
General
-
Target
75d999d431819311abf8bd048cd084acdcd5f4e1
-
Size
376KB
-
MD5
f3b6c4f3ff269bdcc55ad18ec7690497
-
SHA1
75d999d431819311abf8bd048cd084acdcd5f4e1
-
SHA256
854ed63f694e4f9526e3a1325691c934a328a82f5a73c5301b8e261c99b11b39
-
SHA512
30ded7705ce97f774ef98ba4b1888f9720185d430f161583fde1f926439fe91c348d3c7693ce1b34d3ccbd1dc907cb763faa86fb9249be864f6ab66807ad9de1
-
SSDEEP
6144:95iXLVYmUquirE7u/5F7LTVHqpX7zLh4JE5QI/6N6NMBwz+3meeKNf:95ib+mUquib/5FXhKp6Jari8GBNmeeK
Malware Config
Signatures
Files
-
75d999d431819311abf8bd048cd084acdcd5f4e1.exe windows x86
c2e2fa89aec204ac5f3945ce98025d14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryExW
lstrcmpiW
lstrcpyW
lstrcatW
lstrlenW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
VirtualProtect
GetStringTypeW
HeapReAlloc
OutputDebugStringW
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
HeapSize
ExpandEnvironmentStringsW
GetCommandLineW
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
CreateFileW
mswsock
getnetbyname
SetServiceA
GetAddressByNameA
EnumProtocolsA
rcmd
AcceptEx
rtutils
TraceGetConsoleW
TraceVprintfExW
RouterLogEventStringA
RouterLogEventW
TraceDeregisterW
LogEventA
mapi32
ord49
ord153
ord123
ord137
ord73
wininet
GopherFindFirstFileW
InternetQueryOptionA
InternetHangUp
FindFirstUrlCacheContainerW
rpcrt4
NDRSContextMarshall
NdrSimpleStructFree
RpcServerInqBindings
NdrConvert2
NdrNonEncapsulatedUnionBufferSize
NdrConformantArrayUnmarshall
shell32
ExtractAssociatedIconExA
SHBrowseForFolder
user32
MessageBoxW
GetDC
GrayStringA
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
StartServiceCtrlDispatcherW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ