Static task
static1
Behavioral task
behavioral1
Sample
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe
Resource
win7-20230220-en
General
-
Target
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe
-
Size
319KB
-
MD5
5967f722e3b6ef7c9285a3c3e08612c8
-
SHA1
36dfb0b5437eee03f231d536dc96478e69d3c3f3
-
SHA256
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4
-
SHA512
f6a37f3aef850eedd36d207dc216b72893f1daa852926134a299e7f52bd1674bedeb0d69a285f0a0608c15cc86f57ef4a4068389c4bc49f865898bd21d451141
-
SSDEEP
6144:V3L7lp6tB4kt5+hSzkwf1tw3x8cRa65K206GXrbjwyGXQ9:V3Plwvt5+hS4q1w1N5KsKEX
Malware Config
Signatures
Files
-
1e76e4bedd40256e084d3ee8e35ab8104ea17a02119a36fccf749dcdb75e4fc4.exe.exe windows x86
8b23c6f110add61e2d6f38c3c2656d60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleInputW
GetModuleHandleExA
GetCPInfo
MoveFileWithProgressA
GetConsoleAliasesA
GetGeoInfoW
SetFileShortNameW
LoadLibraryW
GetConsoleAliasExesLengthW
GetVersionExW
DeleteVolumeMountPointW
GetFileAttributesA
GetMailslotInfo
CreateActCtxA
GetBinaryTypeW
GetACP
FindNextVolumeMountPointW
SetTapePosition
InterlockedExchange
GetLastError
GetProcAddress
VirtualAlloc
RemoveDirectoryA
FreeUserPhysicalPages
GetNumaHighestNodeNumber
OpenWaitableTimerA
WriteConsoleA
UnhandledExceptionFilter
GetProcessWorkingSetSize
InterlockedExchangeAdd
LocalAlloc
GetNumberFormatW
GetDiskFreeSpaceA
OpenJobObjectW
GetModuleHandleA
HeapSetInformation
EraseTape
GetStringTypeW
GetConsoleTitleW
FatalAppExitA
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
LCMapStringW
WideCharToMultiByte
LCMapStringA
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryA
user32
CharLowerBuffW
SetCaretPos
GetKeyNameTextW
CharUpperW
IsChild
RealGetWindowClassA
LoadMenuA
GetCursorInfo
CopyAcceleratorTableA
CharUpperBuffA
ole32
ReadClassStg
CoUninitialize
winhttp
WinHttpCheckPlatform
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ