Static task
static1
Behavioral task
behavioral1
Sample
90c2c0a3850e702555c86672dfccf87e.exe
Resource
win7-20240221-en
General
-
Target
90c2c0a3850e702555c86672dfccf87e.exe
-
Size
4.2MB
-
MD5
90c2c0a3850e702555c86672dfccf87e
-
SHA1
547237f6c49839d5b52c21541e3ef97e70c09e14
-
SHA256
5d60502a5cb4d285aa1292f7d1fd6297e07e310babf6fc52bcdc86ef0c9e06bb
-
SHA512
bef33bcfe5c99260d7e3d4a1f874606b166a8ee6307780140ce3350df0e1c7804695596fdcd252a9ce5445439afc2bb6a8b33d99bf175fb722f89213197367f9
-
SSDEEP
98304:teW8UzsHIbLf9dWRHWVRhdNR5S1sJRNc/DhpLv/dFcsAkZ5X:q0L1dWRH6Rb9w/n3rVAk3
Malware Config
Signatures
Files
-
90c2c0a3850e702555c86672dfccf87e.exe.exe windows:5 windows x86 arch:x86
d56890d53749dde8bc65c65be68b457c
Code Sign
b4:2a:94:ca:77:2d:41:0d:3d:cb:36:f3:1c:92:ca:a3Certificate
IssuerCN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10700,ST=0b1c1115005f5c4e010b00101c041100031a0d10104b111d+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070bNot Before11-03-2024 05:54Not After11-03-2025 05:54SubjectCN=522910322628070b250c52200b542f1a57031b422732351e332f4620190820022d0b,POSTALCODE=10700,ST=0b1c1115005f5c4e010b00101c041100031a0d10104b111d+ST=0b1c1115494a5c18101602500b53081d121c021c1b120f07110e12511d161a5003091c030c1053460e4113160e181d130101060d401252070f0f08001312055b0c0b0a070b96:d5:9f:7b:db:da:fc:c9:e8:63:5b:6d:c7:a2:be:e2:eb:d7:20:01:b1:73:4e:8c:3a:47:9d:e4:13:42:70:ccSigner
Actual PE Digest96:d5:9f:7b:db:da:fc:c9:e8:63:5b:6d:c7:a2:be:e2:eb:d7:20:01:b1:73:4e:8c:3a:47:9d:e4:13:42:70:ccDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetCurrentProcessId
GetExitCodeThread
GetLastError
DuplicateHandle
GetTickCount
OpenMutexA
LoadLibraryA
LoadLibraryW
GetModuleFileNameW
SetEnvironmentVariableW
FindResourceA
GlobalFindAtomA
GetWindowsDirectoryW
GetCurrentDirectoryA
CreateDirectoryW
RemoveDirectoryW
CreateFileW
GetProcAddress
GetVolumeInformationW
GetVersionExA
FindNextVolumeMountPointW
GetLocaleInfoA
GetLocaleInfoW
GetNumberFormatA
EnumTimeFormatsA
ReadConsoleInputW
AttachConsole
ReadConsoleW
WriteConsoleA
AddConsoleAliasW
GetConsoleAliasesLengthW
GetConsoleAliasExesLengthA
SetEndOfFile
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetFileAttributesExA
GetStringTypeW
OutputDebugStringW
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
HeapFree
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetStdHandle
WriteFile
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
GetCurrentThreadId
GetProcessHeap
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
HeapReAlloc
ReadFile
user32
CharUpperBuffW
GetClassInfoA
LoadKeyboardLayoutW
CharLowerBuffA
gdi32
SetStretchBltMode
shell32
FindExecutableA
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4.0MB - Virtual size: 26.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tulinu Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ