Static task
static1
Behavioral task
behavioral1
Sample
4b8b7e4c7b2aed6c3c67b3d5678f6440.exe
Resource
win7-20221111-en
General
-
Target
4b8b7e4c7b2aed6c3c67b3d5678f6440.exe
-
Size
106KB
-
MD5
4b8b7e4c7b2aed6c3c67b3d5678f6440
-
SHA1
33097d2c883f7e8248c70876cfd6c77b36a1622a
-
SHA256
dc23e92b35cd9ceb3e8adc91a4492facfd66d65f72967ba69c57f17470f9b66f
-
SHA512
51d09f79f1d3fbff711bcb99df119f625bbe2d28be99de2555dc374074b64218be8b536da96047b60449a0a7f67932e27894fa1b3ce0fb6efeadd0234e7203e6
-
SSDEEP
1536:8++5Uk52zLQTDgoYjylkKKPv9AmIBIZigwp6OGWVVpOJV1U5uHk0UgYc5:8zqk5ELAD4yuK52ZEp6OGA+bU5DJc5
Malware Config
Signatures
Files
-
4b8b7e4c7b2aed6c3c67b3d5678f6440.exe.exe windows x86
0dd0722b6dec7f89a2b05a16af0c9cb4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
SetLocalTime
_llseek
FindResourceExW
BuildCommDCBAndTimeoutsA
LoadResource
InterlockedDecrement
ScrollConsoleScreenBufferW
CompareFileTime
CreateJobObjectW
GlobalLock
GetUserDefaultLCID
ConnectNamedPipe
CallNamedPipeW
SetTapeParameters
GetProcessPriorityBoost
GetTickCount
ReadConsoleW
FindActCtxSectionStringA
GlobalAlloc
_hread
GetPrivateProfileStructW
GetConsoleWindow
GetVersionExW
DeleteVolumeMountPointW
LeaveCriticalSection
WritePrivateProfileStructW
SetConsoleMode
IsDBCSLeadByte
ReadFile
GetBinaryTypeW
SetVolumeLabelA
ReleaseActCtx
SetCurrentDirectoryA
OpenMutexW
GetLastError
GetProcAddress
BeginUpdateResourceW
CreateNamedPipeA
ReadFileEx
DisableThreadLibraryCalls
OpenWaitableTimerA
WriteConsoleA
GetExitCodeThread
SetFileApisToANSI
WriteProfileSectionW
VirtualLock
AddAtomA
GlobalHandle
GetTapeParameters
GetSystemInfo
WaitForMultipleObjects
GlobalWire
EnumDateFormatsA
GetThreadPriority
CreateIoCompletionPort
GetModuleHandleA
EnumResourceNamesA
SetCalendarInfoA
OpenSemaphoreW
TlsFree
SuspendThread
lstrcpyA
lstrlenW
FillConsoleOutputCharacterA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
HeapSize
CreateFileA
CloseHandle
gdi32
GetBitmapBits
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ