Static task
static1
Behavioral task
behavioral1
Sample
2d8433b86d0961d6f8e08bb4a8393e03.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2d8433b86d0961d6f8e08bb4a8393e03.exe
Resource
win10v2004-20230220-en
General
-
Target
2d8433b86d0961d6f8e08bb4a8393e03.exe
-
Size
213KB
-
MD5
2d8433b86d0961d6f8e08bb4a8393e03
-
SHA1
289e8dcd9599bd60859404f23649488a48988f04
-
SHA256
6eaf6ff8b4480817d378eda6eaf7ae25190fd3a6cf152997724840f0177c7a9d
-
SHA512
549ef44701eb899d19c22ecc86017ee50df324ad147dd1c0d2853196fe9df0c5afe39a57b8336d162954ec19ad0ff0fe578192f4be6ed1aee13c128f4caede3b
-
SSDEEP
3072:Rn3JL34xhhQ9tYaVE/5H08R8OakWAw6xHhfgRMVmXa7csEyZankCj:13JLQbKC/5HdIkOgHh0Xa7dU1j
Malware Config
Signatures
Files
-
2d8433b86d0961d6f8e08bb4a8393e03.exe.exe windows x86
8b8924b9f5a673fd70977d21932a217f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
FreeEnvironmentStringsA
GetModuleHandleW
FindNextVolumeMountPointA
GetConsoleAliasesA
FormatMessageA
SetHandleCount
FindResourceExA
GlobalAlloc
GetConsoleAliasExesLengthW
GetFileAttributesW
WriteConsoleW
GetBinaryTypeA
GetStringTypeExA
EnumSystemLocalesA
SetLastError
GetProcAddress
VirtualAlloc
OpenJobObjectA
LoadLibraryA
CreateSemaphoreW
InterlockedExchangeAdd
WriteProfileSectionW
EnumDateFormatsA
GetStringTypeW
RequestWakeupLatency
GetVersionExA
LocalSize
FindAtomW
GetWindowsDirectoryW
GetPrivateProfileSectionW
DebugBreak
CloseHandle
CreateFileA
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleExA
EndUpdateResourceW
LockFileEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
ExitProcess
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
HeapAlloc
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
HeapSize
GetLocaleInfoA
RaiseException
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
user32
LoadIconW
LoadMenuW
RedrawWindow
CharLowerBuffA
GetSysColorBrush
GetMenuInfo
GetCaretBlinkTime
gdi32
GetTextExtentPointI
advapi32
ReportEventW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 93KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ