Static task
static1
Behavioral task
behavioral1
Sample
a0ccb9019b90716c8ee1bc0829e0e04cf7166be2f25987abbc8987e65cef2e6f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a0ccb9019b90716c8ee1bc0829e0e04cf7166be2f25987abbc8987e65cef2e6f.exe
Resource
win10v2004-20230220-en
General
-
Target
a0ccb9019b90716c8ee1bc0829e0e04cf7166be2f25987abbc8987e65cef2e6f.bin
-
Size
1.1MB
-
MD5
7b760f60fff500d3c7c408a8bc158e0e
-
SHA1
a4b41efc63460f980130b67eb33c0bd061206744
-
SHA256
a0ccb9019b90716c8ee1bc0829e0e04cf7166be2f25987abbc8987e65cef2e6f
-
SHA512
13662b1447806779d82a29fbb931ec8d400adacd9074c4bbce8db8afd34bbf0c87e43b7790c1631b8d4edc870dbf5348773beadea59a3f73438cdb072c24ae75
-
SSDEEP
24576:uTRIYouZxVPjy+Q7WX6nHvjAbDbuqxXePt:tYouZL7y+QqX6nPjRq4t
Malware Config
Signatures
Files
-
a0ccb9019b90716c8ee1bc0829e0e04cf7166be2f25987abbc8987e65cef2e6f.bin.exe windows x86
10fe61356c24682a433c3291ea735ebc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
DeleteFileA
Process32FirstW
CloseHandle
HeapAlloc
GetProcAddress
SetFilePointerEx
GetFileSize
ExitProcess
GetProcessHeap
GetTickCount
CreateFileA
Process32NextW
GetLastError
GetConsoleMode
Sleep
CreateToolhelp32Snapshot
OpenProcess
ReleaseMutex
CreateMutexA
FindClose
ExpandEnvironmentStringsA
GetDriveTypeA
TerminateProcess
SetConsoleMode
WriteFile
GetCurrentProcess
FindNextFileW
HeapFree
LoadLibraryW
GetFileSizeEx
FindFirstFileW
GetLogicalDrives
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
lstrcmpW
ReadFile
VirtualAlloc
GetVersionExW
GetModuleHandleA
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
TryEnterCriticalSection
DuplicateHandle
GetCurrentThread
GetExitCodeThread
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
DecodePointer
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
FreeLibrary
LoadLibraryExW
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetModuleHandleExW
HeapValidate
GetSystemInfo
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
GetACP
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
WaitForSingleObject
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
MoveFileExW
HeapReAlloc
HeapSize
HeapQueryInformation
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetTimeZoneInformation
CreateFileW
ReadConsoleW
SetEndOfFile
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
advapi32
OpenSCManagerA
OpenServiceA
RegEnumKeyExA
QueryServiceStatusEx
EnumDependentServicesA
CryptDestroyKey
CryptAcquireContextW
CloseServiceHandle
CryptEncrypt
CryptReleaseContext
ControlService
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
RegOpenKeyExW
shell32
ShellExecuteA
crypt32
CryptStringToBinaryA
CryptDecodeObjectEx
iphlpapi
GetTcpTable
ws2_32
ntohs
inet_ntoa
Sections
.text Size: 810KB - Virtual size: 810KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ