Static task
static1
Behavioral task
behavioral1
Sample
d674dda5fe1ab13856d54ec12780250cf177894cfeba62581b8786d7ae3d31df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d674dda5fe1ab13856d54ec12780250cf177894cfeba62581b8786d7ae3d31df.exe
Resource
win10v2004-20221111-en
General
-
Target
5f0fae53632495492526e07e89f1ef39.bin
-
Size
22.1MB
-
MD5
9221f3bfa4a88ce888df254cbbe26321
-
SHA1
e393797b912a8093483339c0f31f170a2cc47689
-
SHA256
2a1789f745546b127584a267968ca68a77b9a3995df8caa896bdb9b1bf76530b
-
SHA512
3909532479856042b6df12f1e2ab6a66373228cfbb66683682cbc2979e4839d7e24fd77a21162d80c09eecc48301d3fd6d8532c8f2e44dd932354d264f0b1b80
-
SSDEEP
393216:MnJc+0JgqsHzlcBRe2HBcPRMkzR64Wt3M9xKfU+BBUgFbRWeFeh:3Tsie2HqPRMkN64WNmKM+4gFdPUh
Malware Config
Signatures
Files
-
5f0fae53632495492526e07e89f1ef39.bin.zip
Password: infected
-
d674dda5fe1ab13856d54ec12780250cf177894cfeba62581b8786d7ae3d31df.exe.exe windows x64
Password: infected
125752bfa433cd8bfb9ea31fd47bef09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
SetCurrentDirectoryW
GetFileAttributesW
CreateFileW
lstrlenA
lstrcmpiA
lstrcpyW
CloseHandle
GetShortPathNameW
GetFileSize
GlobalAlloc
ReadFile
SetFilePointer
WriteFile
GlobalFree
lstrcpyA
GetModuleHandleW
LoadLibraryW
GetProcAddress
FreeLibrary
GetEnvironmentVariableW
GetLastError
GetDiskFreeSpaceW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentProcess
GetTempPathW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateDirectoryW
FindFirstFileW
FindClose
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
CompareFileTime
SetFileAttributesW
DeleteFileW
FindNextFileW
RemoveDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW
SetFileTime
CreateFileA
GetFileTime
GetSystemDirectoryW
LoadLibraryExW
lstrlenW
GetStartupInfoA
GetModuleHandleA
RtlUnwindEx
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
QueryPerformanceFrequency
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
DuplicateHandle
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
IsDebuggerPresent
OutputDebugStringA
UnhandledExceptionFilter
VirtualAlloc
VirtualQuery
ExitProcess
SetConsoleCtrlHandler
GetConsoleOutputCP
WriteConsoleW
WideCharToMultiByte
IsDBCSLeadByteEx
MultiByteToWideChar
SetStdHandle
GetConsoleMode
SetFilePointerEx
DeleteFileA
RaiseException
LoadLibraryA
user32
ShowWindow
SendMessageW
EnableWindow
MessageBoxW
CharNextA
wsprintfA
ExitWindowsEx
CharPrevW
PostMessageW
LoadStringW
shell32
SHFileOperationW
SHChangeNotify
SHBrowseForFolderW
SHGetPathFromIDListW
comctl32
ord17
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PBU30 Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ