Static task
static1
Behavioral task
behavioral1
Sample
update.exe
Resource
win10v2004-20221111-en
General
-
Target
update.exe
-
Size
1.6MB
-
MD5
08beae44c872be9929a79c812534494f
-
SHA1
1d23590d1fe6b407bd209eb78132bee25e81d1d0
-
SHA256
a2ddaa327b7712ee58f7809794540157d2433bd27aca885cdc98893cf8eebf53
-
SHA512
6d6edd7efbf91475476f67f31e877a8e461c3099cff234019cedc02a940cbbd4498c9e5c2dc780349979ee51db2c3a0d8e7da8eea5ea83ef73bd077cc0d68f34
-
SSDEEP
24576:w5uCRmfTCdKLH+NVKsl57/t0Zj8xGbokqg9IKbj1qYlbQSHnoJrF02JFP0shtUOu:w/HKLkYy01UKbRHESHIFD0sUORc5
Malware Config
Signatures
Files
-
update.exe.exe windows x86
ce58adf3abf4a0c8aa0648da9ca028eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLangID
GetCommandLineW
SetPriorityClass
lstrlenA
GetEnvironmentStringsW
GlobalLock
GetLogicalDrives
GetTickCount
GetProcessHeap
FormatMessageA
GetCommandLineA
Sleep
GetModuleFileNameW
GetACP
lstrlenW
SetLastError
lstrcmpiA
GetProcAddress
IsValidCodePage
GetPrivateProfileStringA
GetSystemInfo
WaitForMultipleObjects
GetModuleHandleA
GetCurrentThreadId
DuplicateHandle
GetCurrentProcessId
LCMapStringW
CloseHandle
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
HeapValidate
LoadLibraryExW
GetOEMCP
GetCPInfo
GetFileType
InitOnceExecuteOnce
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
FreeEnvironmentStringsW
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryW
OutputDebugStringA
WriteConsoleW
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetModuleFileNameA
HeapAlloc
WideCharToMultiByte
LCMapStringEx
CreateFileW
user32
EnumDisplayDevicesW
IsIconic
GetMessageExtraInfo
GetTopWindow
GetParent
IsWindow
GetShellWindow
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ