Static task
static1
Behavioral task
behavioral1
Sample
76ada160c9de1605419ffc09b2c91716b975da0cf9be53a4ed12776cad0d174d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
76ada160c9de1605419ffc09b2c91716b975da0cf9be53a4ed12776cad0d174d.exe
Resource
win10v2004-20230220-en
General
-
Target
5441c3d3300cc1bd9cf3ad9277b148d7.bin
-
Size
147KB
-
MD5
56743ad85e2d881508a9949ccbd46fba
-
SHA1
8732aa131485243d26ef5cb0f2a6b6fb26e82e4f
-
SHA256
1baed7b6f7419f92bb36486895514e8856991455e29e67af39090bac0860b9d5
-
SHA512
bbae3d90ef8696ac8ad434f4073ccc1f6556011c5d06ac319a53478ae42782c142e1b7d1533f77800d9184464e158e4b9e2a52321a541d015c110966e0bdeafd
-
SSDEEP
3072:xue4xlhRYRpb5RIGiTzn3jg/rJ6rZvFqkaywPd+HFP:xue4XhRwpbJojg/9ucGlP
Malware Config
Signatures
Files
-
5441c3d3300cc1bd9cf3ad9277b148d7.bin.zip
Password: infected
-
76ada160c9de1605419ffc09b2c91716b975da0cf9be53a4ed12776cad0d174d.exe.exe windows x86
Password: infected
b7b66070cf182b2615019a5dbe522294
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
GetCPInfo
GetConsoleAliasExesLengthA
DeleteVolumeMountPointA
OpenJobObjectA
GlobalSize
GetModuleHandleExW
InterlockedCompareExchange
WriteConsoleInputA
GetWindowsDirectoryA
GetUserDefaultLangID
CreateActCtxW
GlobalAlloc
SetFileShortNameW
GetVersionExW
LeaveCriticalSection
GetFileAttributesW
GetBinaryTypeA
GetConsoleAliasesW
InterlockedExchange
GetLastError
BackupRead
GetProcAddress
VirtualAlloc
RemoveDirectoryA
GetDiskFreeSpaceW
OpenWaitableTimerA
LoadLibraryA
WriteConsoleA
UnhandledExceptionFilter
QueryDosDeviceW
SetProcessWorkingSetSize
OpenJobObjectW
FindAtomA
Module32FirstW
GetThreadPriority
GetModuleHandleA
GetStringTypeW
EnumDateFormatsW
EndUpdateResourceA
GetCurrentProcessId
GetFileInformationByHandle
CreateWaitableTimerA
CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
MultiByteToWideChar
GetStartupInfoW
HeapAlloc
HeapFree
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapReAlloc
RaiseException
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
user32
CopyAcceleratorTableW
GetKeyNameTextA
LoadMenuA
LoadIconA
CharLowerBuffW
GetCursorInfo
SetCaretPos
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ