Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
General
-
Target
file
-
Size
190KB
-
MD5
2836d22fc9793312d31aa9d96839bd91
-
SHA1
6e5f5a9e2c8d3f8bc714d978542cd12b0b4c8e7d
-
SHA256
2aa80995de6dce2c7590be4937c9e53b8f56a515f6699c3818c19000cd0a6bb0
-
SHA512
5e03c783d818acd87f77a267fef71cdfdb11d540950ce53bcd56e8896166a5358a622cc125d2e8d3e7d09669becea62b6cd7cc0571fe67b3aa784d59b7b3c4ba
-
SSDEEP
3072:DXyXRryCCqf44XxGv8CTmXi35fm47QyMAeHgdDFv1HUAbljUT:DiXLPfRc04M47Qy3kgfx7blA
Malware Config
Signatures
Files
-
file.exe windows x86
31111ee2beeeebc1d1040d6c5884273d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindActCtxSectionGuid
ReadConsoleInputW
GetWindowsDirectoryA
FindFirstVolumeMountPointA
FindFirstChangeNotificationA
WaitForSingleObject
ReadConsoleInputA
VerifyVersionInfoA
GetVersionExA
GetCurrentProcess
OpenEventA
CreateFileMappingA
SetLocaleInfoW
GetProcAddress
LoadLibraryA
GlobalAlloc
DeleteTimerQueueTimer
GetConsoleTitleA
DeleteFileA
FindResourceA
GetBinaryTypeW
SetLastError
GetProfileSectionW
CreateFileW
GetComputerNameExW
GetConsoleAliasA
WriteProfileSectionW
SetVolumeMountPointA
EnumResourceLanguagesW
CommConfigDialogA
_hread
EnumDateFormatsW
ActivateActCtx
DeleteVolumeMountPointA
WritePrivateProfileStringA
GetSystemDirectoryA
GetStringTypeA
GetLongPathNameA
FindNextFileW
EnumCalendarInfoA
LocalAlloc
ReleaseActCtx
FindFirstFileW
CreateFileA
WriteConsoleW
LoadLibraryW
WriteProfileStringW
GetModuleHandleA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
RtlUnwind
RaiseException
GetCommandLineW
HeapSetInformation
GetStartupInfoW
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetCPInfo
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThreadId
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetLocaleInfoW
HeapReAlloc
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
user32
GetMenuBarInfo
GetMessagePos
advapi32
RevertToSelf
shell32
FindExecutableA
ole32
CoGetInstanceFromIStorage
Sections
.text Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.huzu Size: 512B - Virtual size: 5B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zuzaya Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tared Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zemon Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fimu Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ