Static task
static1
Behavioral task
behavioral1
Sample
b8214a4193ab2e9ad46cc908789a17bc2c78cd4fa215b5311e7908caabb3ea6e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
b8214a4193ab2e9ad46cc908789a17bc2c78cd4fa215b5311e7908caabb3ea6e.exe
Resource
win10v2004-20220414-en
General
-
Target
b8214a4193ab2e9ad46cc908789a17bc2c78cd4fa215b5311e7908caabb3ea6e
-
Size
168KB
-
MD5
3f703f81f4a4c842cdc0703a72c2b962
-
SHA1
014c9705a2cb162435ed8f59990414c0d1c8bb68
-
SHA256
b8214a4193ab2e9ad46cc908789a17bc2c78cd4fa215b5311e7908caabb3ea6e
-
SHA512
ec266ae10cbbcc86581cb96d0fec1ecb0ef2cb76e13c116efde0adcdb11eb5943eb638f80d5ef39bfb0a070d9a8137bf03855820f758ea033109b9335db6a3ec
-
SSDEEP
1536:T99L3U7JCSD3aP2CFboy5teu6oJxHXf3oc537TflB8tt5/gpGCoi++Np:T99L3HZ0i/JxP3n38tt5Ipyl4p
Malware Config
Signatures
Files
-
b8214a4193ab2e9ad46cc908789a17bc2c78cd4fa215b5311e7908caabb3ea6e.exe windows x86
8000f4026728059d036b8430b683c1ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrencyFormatA
SetCommTimeouts
GlobalAlloc
Sleep
GetExitCodeProcess
GetFileAttributesW
ReadFile
WritePrivateProfileStringW
FormatMessageA
FindFirstFileExA
GetLastError
GetProcAddress
RemoveDirectoryA
OpenWaitableTimerA
GetCurrentProcessId
GetPrivateProfileSectionW
LCMapStringW
GetModuleHandleW
CreateHardLinkA
HeapAlloc
GetLocaleInfoA
lstrlenA
FindResourceA
GetNamedPipeHandleStateW
CreateFileA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
HeapSize
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 41.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ