Static task
static1
Behavioral task
behavioral1
Sample
2fa8d3ac3480b45a945dc7be90083bf61c29850acd8bb4a6d2f5a07728b16752.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2fa8d3ac3480b45a945dc7be90083bf61c29850acd8bb4a6d2f5a07728b16752.exe
Resource
win10v2004-20220414-en
General
-
Target
2fa8d3ac3480b45a945dc7be90083bf61c29850acd8bb4a6d2f5a07728b16752
-
Size
216KB
-
MD5
6eb8865bf055ba30cc9e2843f16ee461
-
SHA1
cde4ef3081071abd18f434b00195fba5a05b4fe0
-
SHA256
2fa8d3ac3480b45a945dc7be90083bf61c29850acd8bb4a6d2f5a07728b16752
-
SHA512
2a0d71adaf446e1c7a98b5720e9b1b29b986c9095b94500ac55b2d3cbbb52e768bee1edcd66ef7dd416ccff19c70e1158ab5e50112a972d7d1a6cf89e1f283b7
-
SSDEEP
3072:5l530FgTonP+e1heSJVHzQrXe/BSIZSpyQoWygXLi7Nqg8bZnX76VIiidgON9CA:5l9Ron2wL8rXeZ/SkLYbZX76OL
Malware Config
Signatures
Files
-
2fa8d3ac3480b45a945dc7be90083bf61c29850acd8bb4a6d2f5a07728b16752.exe windows x86
4cede94f650f2cf33bf8910b0f72f89a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetCurrentThread
VirtualAlloc
GetEnvironmentStrings
GetProcAddress
LoadLibraryA
FreeLibrary
GetOEMCP
InterlockedExchange
EnterCriticalSection
GetVersionExW
GetStringTypeW
lstrlenW
GetEnvironmentStringsW
HeapAlloc
ResetEvent
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetStringTypeA
IsValidCodePage
IsValidLocale
RtlUnwind
HeapFree
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
RaiseException
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
Sleep
SetConsoleCtrlHandler
InitializeCriticalSection
HeapReAlloc
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
SetEnvironmentVariableA
ole32
CoUninitialize
CLSIDFromString
CoInitialize
CoCreateGuid
RegisterDragDrop
OleInitialize
OleSaveToStream
CoGetClassObject
scarddlg
ord2
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE