Static task
static1
Behavioral task
behavioral1
Sample
41552ff80f1fa54ced4bcd15edf0f10c498a5b4ab699451322970c2d230d6ce9.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
41552ff80f1fa54ced4bcd15edf0f10c498a5b4ab699451322970c2d230d6ce9.exe
Resource
win10v2004-20220414-en
General
-
Target
41552ff80f1fa54ced4bcd15edf0f10c498a5b4ab699451322970c2d230d6ce9
-
Size
240KB
-
MD5
491bf48093ce883bc2caf2e7d37f91a5
-
SHA1
388f82016f77a1809e73162c447d1d3d34288b29
-
SHA256
41552ff80f1fa54ced4bcd15edf0f10c498a5b4ab699451322970c2d230d6ce9
-
SHA512
223cb619a9598ffd1f33197bd25c8208a3792a46b7062945ec320e2f499fe86a40f17720b8140cfc936f2b0b1d58620bb31dba1b0fa25935cb65e404ae90c7c0
-
SSDEEP
3072:+y1FYDD4mrr1v4H23RESEv0kpEFI9F6VCO+UxPd5q9z8AbPn/Yd61I+x:nHUcmrr1v4HopyFx69Mfzwd61I+x
Malware Config
Signatures
Files
-
41552ff80f1fa54ced4bcd15edf0f10c498a5b4ab699451322970c2d230d6ce9.exe windows x86
597a7ab795351848e996cf862ed8545e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetProcessAffinityMask
GetProcessIoCounters
GetCurrentProcess
GetTickCount
GetSystemTimes
GlobalAlloc
TerminateThread
GetProcessHandleCount
GetExitCodeProcess
TerminateProcess
ExitThread
LoadLibraryA
GetProcessId
GetProcessWorkingSetSize
GetFileType
GetProcessAffinityMask
FatalExit
VirtualProtect
SetProcessShutdownParameters
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
EncodePointer
DecodePointer
GetLastError
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
HeapSize
HeapFree
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
GetStdHandle
WriteFile
GetModuleFileNameW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
CreateFileW
user32
GetPropW
ShowScrollBar
EnableScrollBar
GetMessageExtraInfo
BeginPaint
GetMonitorInfoA
SetPropW
GetScrollRange
GetCaretPos
winhttp
WinHttpConnect
WinHttpCloseHandle
WinHttpWriteData
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ