Static task
static1
Behavioral task
behavioral1
Sample
8182e71c266679e46c6138ee46af486f1586ab1e375a53cb8a954c6cf8354f7a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8182e71c266679e46c6138ee46af486f1586ab1e375a53cb8a954c6cf8354f7a.exe
Resource
win10v2004-20230220-en
General
-
Target
8182e71c266679e46c6138ee46af486f1586ab1e375a53cb8a954c6cf8354f7a.exe
-
Size
95KB
-
MD5
afbb1d1eedaa8520c6c02696973a37a6
-
SHA1
556972a01c0c737630799d58e450aebcaaf527c7
-
SHA256
8182e71c266679e46c6138ee46af486f1586ab1e375a53cb8a954c6cf8354f7a
-
SHA512
dba355c2c73023084018a2b717a68c17a6ca1fe9569770be58e68519bec3ad98a7c5b084e96012be323af06c051434b937fb86bc49b58502c9ddb735784568e2
-
SSDEEP
1536:pjCRsuBD3LTEvSBMjq6UjTkFrD+07JTX3io1CdO6RR8cQOFvPSMs02ruxZC1os:NWsSDT6U3m+oBSBpR8clKm2ruxZC1o
Malware Config
Signatures
Files
-
8182e71c266679e46c6138ee46af486f1586ab1e375a53cb8a954c6cf8354f7a.exe.exe windows
ab97a11f1a35fac580d7ba2691a1b76a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
__CxxFrameHandler
_CxxThrowException
_ultoa
?terminate@@YAXXZ
_onexit
__dllonexit
_controlfp
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
??3@YAXPAX@Z
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
printf
puts
?set_terminate@@YAP6AXXZP6AXXZ@Z
??2@YAPAXI@Z
kernel32
UnhandledExceptionFilter
WriteFile
ConnectNamedPipe
CreateNamedPipeA
DisconnectNamedPipe
SetLastError
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
CreateFileA
SetThreadPriority
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
DeviceIoControl
GetOverlappedResult
WaitForMultipleObjects
OpenProcess
DuplicateHandle
CreateThread
ResumeThread
PulseEvent
GetProcessHeap
HeapAlloc
lstrcpyA
OpenEventA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
GetLastError
lstrlenA
Sleep
CloseHandle
WaitForSingleObject
CreateEventA
ExpandEnvironmentStringsA
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
ReadFile
SetUnhandledExceptionFilter
GetModuleHandleA
lstrcmpiA
FormatMessageA
LocalAlloc
LocalFree
MultiByteToWideChar
GetACP
WideCharToMultiByte
lstrlenW
ntdll
strpbrk
_strnicmp
isgraph
sprintf
_itoa
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE