Static task
static1
Behavioral task
behavioral1
Sample
b2b7b5f184264858889d5a2178f110824cda64d73aa350abb2ff904dd73240e2.exe
Resource
win7-20230220-en
General
-
Target
9039af66487c909b5c54343b065a7d48.bin
-
Size
280KB
-
MD5
7a83952b1f6e73745570f4e024ee90ba
-
SHA1
b0e48b7a1e1d5758ca5a3b81f2ffc21db222af89
-
SHA256
cd11c3504517364cfee7f30bdb6d6b20ee679b4309e525bbc537fcb516438592
-
SHA512
ba30eeb8c246b5b51190da77d1fd097ad4e4145d0a08628b1f5b95b7e790a6f28d1ff73eb1f0a677bcac2043e1a32f83ed31cf5d71b0c939f517b7799d71e89a
-
SSDEEP
6144:UnCSJJZg8efQ+eRu3TvHDKoFlUod4tazBbdU2FETpfs4Ap5BlIXsKUr:iHbefQajTs0Dxwpfs4OBlIcLr
Malware Config
Signatures
Files
-
9039af66487c909b5c54343b065a7d48.bin.zip
Password: infected
-
b2b7b5f184264858889d5a2178f110824cda64d73aa350abb2ff904dd73240e2.exe.exe windows x86
Password: infected
57b2dce156c7f62e042880189e8dc326
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDefaultCommConfigA
CreateMutexW
WriteConsoleInputW
EnumDateFormatsExW
CopyFileExW
EnumCalendarInfoW
VerSetConditionMask
GetConsoleAliasA
GetEnvironmentStringsW
GetModuleHandleExW
WaitForSingleObject
SetEvent
_lclose
GetProcessPriorityBoost
GetModuleHandleW
EnumCalendarInfoExW
EnumResourceTypesA
GlobalAlloc
LoadLibraryW
GetComputerNameExA
SetMessageWaitingIndicator
IsDBCSLeadByte
lstrcmpW
GetStdHandle
SetLastError
GetProcAddress
GetFirmwareEnvironmentVariableW
SearchPathA
OpenMutexA
OpenWaitableTimerW
LocalAlloc
SetCalendarInfoW
BuildCommDCBAndTimeoutsW
SetConsoleOutputCP
WriteProfileSectionW
AddAtomA
GetPrivateProfileSectionNamesA
FindFirstVolumeMountPointA
ContinueDebugEvent
FindNextFileW
GetStringTypeW
FatalAppExitA
GetCurrentThreadId
GetWindowsDirectoryW
DeleteFileW
IsValidLocale
EnumSystemLocalesA
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
DeleteFileA
user32
LoadMenuA
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 182KB - Virtual size: 39.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ