Static task
static1
Behavioral task
behavioral1
Sample
c7f1bb16cdb30e0abbc0c71be820e15df51c67add3e601b839f916c7007c9356.exe
Resource
win10-20230220-en
General
-
Target
c7f1bb16cdb30e0abbc0c71be820e15df51c67add3e601b839f916c7007c9356
-
Size
283KB
-
MD5
62a27f97ff6597ef6e6d2c2c2d472ce1
-
SHA1
1c5681f5bcdb910b89e524387b19fc4c9d00f4ad
-
SHA256
c7f1bb16cdb30e0abbc0c71be820e15df51c67add3e601b839f916c7007c9356
-
SHA512
5dafa8ae843a22f8392e8ea1b7c1247c1b4d81d7434f0fb9d6e5063c19036e32c43864abad9d729ecc52d2f4e2a31cb009cbe9f0d2e6d643cf8ed7300f494836
-
SSDEEP
6144:r8QUTpfqGzW64CwUSdFi7xgwOr33nMtUO1xC/xj:rNUtfqG9n1Sy7xgNbXMf3uxj
Malware Config
Signatures
Files
-
c7f1bb16cdb30e0abbc0c71be820e15df51c67add3e601b839f916c7007c9356.exe windows x86
e30ff39bd216b16620a9235ca656bce6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
FindFirstVolumeMountPointW
ReleaseMutex
ReadConsoleInputA
VerifyVersionInfoW
GetCPInfoExW
CreateEventW
SetLocaleInfoA
GetProcAddress
GlobalAlloc
DeleteFileW
EnumResourceTypesW
LoadLibraryW
GetBinaryTypeA
LocalFlags
WriteProfileStringW
GetComputerNameExW
GetConsoleAliasW
WriteProfileSectionW
GetLastError
GetStringTypeExA
SetSystemPowerState
SetVolumeMountPointA
GetModuleHandleW
EnumResourceLanguagesA
SetDefaultCommConfigW
EnumTimeFormatsW
GetSystemDirectoryA
DeleteVolumeMountPointA
GetStartupInfoW
FreeUserPhysicalPages
WritePrivateProfileStringW
FoldStringW
GetShortPathNameA
GetFileInformationByHandle
FindNextFileA
EnumCalendarInfoW
LocalAlloc
UnhandledExceptionFilter
RtlCaptureContext
GetModuleHandleA
LoadLibraryA
DecodePointer
EncodePointer
GetCommandLineW
HeapSetInformation
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RtlUnwind
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
gdi32
GetBoundsRect
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 182KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ