Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file
-
Size
322KB
-
MD5
09d889701b3be4a73a1a7a67703b14be
-
SHA1
51933d8e48b254808631ff5d137bf37b2e8c634a
-
SHA256
798a82f6a6b2a269f87718b2a90e97f53a9d894ea70be0f0e5b12fbd38f1e76e
-
SHA512
54b361fb8ddfba5c348defc1764bea1d32c03216895ad33c822c67e130c5d9463186acca613225cbe6dbd0dab04556e7c533891455a227f783e3db4f4a9bfc95
-
SSDEEP
3072:fPEPvCQSPRdN3mKaAWiooQhOLq8Jld+Ryg8ZSgCQENe+pGS2efz3:fMP5EN3mKgioGHJldmyQQkeQGSvL
Malware Config
Signatures
Files
-
file.exe windows x86
48d903c5751da17f2c5d5f89e77b3bb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterA
SetWaitableTimer
InterlockedIncrement
GetCurrentProcess
GetComputerNameW
GetTickCount
GetNumberFormatA
LoadLibraryW
GetPrivateProfileStructW
GetBinaryTypeA
GetGeoInfoA
OpenMutexW
GetLastError
SetLastError
GetNumaProcessorNode
VirtualAlloc
EnumSystemCodePagesW
BuildCommDCBW
GetProcessWorkingSetSize
LocalAlloc
AddAtomW
GetCommMask
FoldStringA
GetModuleHandleA
ReadConsoleInputW
LCMapStringW
GetProcAddress
SetLocaleInfoA
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
user32
GetListBoxInfo
LoadMenuA
advapi32
ReportEventA
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jebuca Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gefude Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ