Static task
static1
Behavioral task
behavioral1
Sample
131aa853893adad9bfb3e546efc555467a990a89.bin.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
131aa853893adad9bfb3e546efc555467a990a89.bin.exe
Resource
win10v2004-20230220-en
General
-
Target
131aa853893adad9bfb3e546efc555467a990a89.bin.exe
-
Size
425KB
-
MD5
058bc3d69908c411441021c7449a7663
-
SHA1
131aa853893adad9bfb3e546efc555467a990a89
-
SHA256
5bd70163b5ee71238d37ffa0ff179e6a42fc28ff5e218c11502e8341b031b951
-
SHA512
2388d96077538f524cd2d9674ee6eee9df8a9968f3eaef7b7a032a3f4809ff241a0b30b52dd8473a57fa329891c88c13921b83a47877eb9f4adb90a150b461a1
-
SSDEEP
6144:wWskmXumQCyCfR1/6NvLtAF4NUnkP0ykCFP+r3yLTcszTZaCoL758imz87zXSPN4:wxkmFcAF4CerkM/U+TICoL758P7y
Malware Config
Signatures
Files
-
131aa853893adad9bfb3e546efc555467a990a89.bin.exe.exe windows x86
7ce6c826f79c4e88b79647cff1bbd773
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSetInformation
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
IsDBCSLeadByte
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
LockFile
LockResource
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
OpenProcess
OutputDebugStringW
PeekNamedPipe
Process32FirstW
Process32NextW
GetVersionExW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleOutputCharacterA
ReadFile
ReleaseActCtx
RemoveDirectoryA
ReplaceFileA
ResumeThread
RtlUnwind
SearchPathA
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetProcessWorkingSetSize
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SetVolumeLabelW
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileSectionA
WriteProcessMemory
_lclose
lstrcatA
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrcpynA
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTimeFormatA
GetTickCount
GetThreadTimes
GetThreadLocale
GetTempPathW
GetTempPathA
GetTempFileNameW
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetSystemDefaultUILanguage
GetStringTypeW
GetStringTypeExA
GetStringTypeA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameW
GetShortPathNameA
GetProfileStringA
GetProfileIntA
GetProcessHeap
GetPrivateProfileSectionA
GetOEMCP
GetNumberFormatA
GetModuleHandleW
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesExA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetConsoleScreenBufferInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetComputerNameW
GetComputerNameA
GetCommandLineW
GetCommandLineA
GetCPInfoExW
GetCPInfoExA
GetCPInfo
GetAtomNameA
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeConsole
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExW
FindFirstFileExA
FindFirstFileA
FindClose
FillConsoleOutputCharacterW
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesA
EnumSystemCodePagesW
EnumSystemCodePagesA
EnumResourceLanguagesA
EnterCriticalSection
EncodePointer
DuplicateHandle
DeviceIoControl
DeleteFileW
DeleteCriticalSection
DecodePointer
CreateToolhelp32Snapshot
CreateThread
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreatePipe
CreateMutexW
CreateMutexA
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CreateDirectoryA
CreateActCtxW
CopyFileW
CopyFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
GetModuleHandleA
LoadLibraryW
GetProcAddress
GetDriveTypeA
QueryDosDeviceW
GetFileAttributesA
user32
LoadIconA
LoadIconW
gdi32
StartPage
StartDocA
SetWorldTransform
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextJustification
SetTextColor
SetTextCharacterExtra
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPolyFillMode
SetPixelV
SetPixel
SetPaletteEntries
SetMapperFlags
SetMapMode
SetLayout
SetGraphicsMode
SetDIBColorTable
SetColorAdjustment
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SetAbortProc
SelectPalette
SelectObject
SelectClipPath
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RoundRect
RestoreDC
RectVisible
RealizePalette
PtVisible
PtInRegion
PolylineTo
Polygon
PolyDraw
PolyBezierTo
PlayMetaFileRecord
PlayMetaFile
PlayEnhMetaFile
PatBlt
OffsetWindowOrgEx
OffsetViewportOrgEx
OffsetRgn
OffsetClipRgn
ModifyWorldTransform
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextMetricsA
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextCharsetInfo
GetTextAlign
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
StretchBlt
GetROP2
GetPolyFillMode
GetPixel
GetPaletteEntries
GetObjectType
GetObjectA
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetLayout
GetFontLanguageInfo
GetDeviceCaps
GetDIBits
GetCurrentPositionEx
GetCurrentObject
GetClipRgn
GetClipBox
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthA
GetCharWidth32W
GetCharWidth32A
GetBoundsRect
GetBkMode
GetBkColor
GetBitmapBits
FrameRgn
FillRgn
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExtCreateRegion
ExtCreatePen
ExcludeClipRect
Escape
EnumMetaFile
EnumFontFamiliesExA
EnumFontFamiliesA
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DPtoLP
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileA
CreateHatchBrush
CreateFontIndirectA
CreateFontA
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDIBPatternBrushPt
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyMetaFileA
CombineRgn
CloseMetaFile
BitBlt
ArcTo
AbortDoc
StretchDIBits
GetRgnBox
UnrealizeObject
advapi32
RegOpenKeyA
RegQueryValueExW
Sections
.text Size: 397KB - Virtual size: 397KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ