Static task
static1
Behavioral task
behavioral1
Sample
2300a4eb4bf1216506900e6040820843.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2300a4eb4bf1216506900e6040820843.exe
Resource
win10v2004-20230220-en
General
-
Target
2300a4eb4bf1216506900e6040820843.bin
-
Size
1.5MB
-
MD5
2300a4eb4bf1216506900e6040820843
-
SHA1
ed7636f5f6fb9b4ff0611ca88af431659af70b11
-
SHA256
fa06b71c4c18bffd0283d07fa13a113a6999d2b597cd91eacdc5da3f240a54fb
-
SHA512
70047ac9c2a05cb2b4af51d7a23894b43c87c1f023207439ad73481c342c0877bc678aca951b20b6601861e910ebbfb116d3766d512269436976006f394a4d1f
-
SSDEEP
24576:nI333YKdCgYigI1s8SUMrunKpflAL4h2rl+Z+4voXUyQFEM:6HHdCgN1XSUMrFCp9HXUdEM
Malware Config
Signatures
Files
-
2300a4eb4bf1216506900e6040820843.bin.exe windows x86
7535daaa8f71bde485a85b9c8fc6ae5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CreateFileW
Sleep
VirtualAlloc
VirtualProtect
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLastError
FormatMessageW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleExW
HeapAlloc
HeapValidate
GetSystemInfo
GetStdHandle
WriteFile
ExitProcess
GetFileType
OutputDebugStringW
WriteConsoleW
SetConsoleCtrlHandler
GetCurrentThread
GetTempPathW
GetDateFormatW
GetTimeFormatW
SetEndOfFile
user32
MessageBoxA
advapi32
RegDeleteKeyW
RegEnumValueW
RegGetValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
ShellAboutW
ShellExecuteExW
gdiplus
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipCreateSolidFill
GdipSetPageUnit
GdipAlloc
GdipDrawImageRectI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipCloneBrush
GdipFillRectangleI
GdipDrawArcI
GdipDrawLineI
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipSetSmoothingMode
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipSetInterpolationMode
Sections
.text Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 565KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ