Static task
static1
Behavioral task
behavioral1
Sample
497dc28c2688f77e66e1be665f75c211280ea39e1d67fda10d934f206563a488.exe
Resource
win7-20230831-en
General
-
Target
497dc28c2688f77e66e1be665f75c211280ea39e1d67fda10d934f206563a488
-
Size
423KB
-
MD5
e577e9d4eb9072e8d26ad53ae38765c5
-
SHA1
d5e97d308c9cf0b501f904e20652f609033ef697
-
SHA256
497dc28c2688f77e66e1be665f75c211280ea39e1d67fda10d934f206563a488
-
SHA512
3f19e3744794e59b409724a9319998ac67c636a66bb8098d5c677d93e561bb2538fd78d70d6c221c7750fdeef7f87497bc2eeef81c51657eea628306bf7f885b
-
SSDEEP
6144:X7KpH4YkwDTBIeRXC251cNwW8rgAibUEYL7Wl5Ck3vQm8zvUt:XWpYyDT1XC251cNwW8EAibU//k3vQ9vc
Malware Config
Signatures
Files
-
497dc28c2688f77e66e1be665f75c211280ea39e1d67fda10d934f206563a488.exe windows:6 windows x86
e23c84076c2d588e1423cbfd92719fb0
Code Sign
0c:44:b9:bd:92:4a:3f:b1:4c:03:11:9b:f0:82:3a:93Certificate
IssuerCN=Eikka Kolehmainen Viinikainen CA,O=Crista,C=HaishengNot Before13/09/2023, 12:06Not After31/12/2029, 16:00SubjectCN=Eikka Kolehmainen Viinikainen CA,O=Crista,C=Haishengcf:c1:9b:cf:2c:b2:b0:38:f4:71:52:83:58:c2:68:18:44:ab:5a:de:ae:60:77:7e:56:d5:05:a9:e5:b4:8a:27Signer
Actual PE Digestcf:c1:9b:cf:2c:b2:b0:38:f4:71:52:83:58:c2:68:18:44:ab:5a:de:ae:60:77:7e:56:d5:05:a9:e5:b4:8a:27Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
Sleep
VirtualAlloc
ReadFile
GetFileSize
DecodePointer
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetCurrentThread
GetFileAttributesExW
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
SetConsoleCtrlHandler
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapSize
HeapReAlloc
ReadConsoleW
CreateFileW
WriteConsoleW
EncodePointer
CreateFileA
urlmon
URLDownloadToFileA
advapi32
SystemFunction036
Sections
.textbss Size: - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 343KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ