Static task
static1
Behavioral task
behavioral1
Sample
4fc205955c7c12fce971e664cbad64b674b6d2e815ba0eca6d26b450b391212e.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
4fc205955c7c12fce971e664cbad64b674b6d2e815ba0eca6d26b450b391212e.exe
Resource
win10v2004-20220414-en
General
-
Target
4fc205955c7c12fce971e664cbad64b674b6d2e815ba0eca6d26b450b391212e
-
Size
96KB
-
MD5
0d602b614e2695523b2eca07c922e864
-
SHA1
8d64db0f97084f1f09a600a383e90b7634155071
-
SHA256
4fc205955c7c12fce971e664cbad64b674b6d2e815ba0eca6d26b450b391212e
-
SHA512
792e083fcae341f663bc487b2a13ba48fa8799d6616ed2f7db8806d18a288c421dadc60d1afefa7f50c9a2c5128bf3d40ec84f24d5921a3abc52f076d40cfc86
-
SSDEEP
1536:bTP6R3msfnvhMK5t3/OeESiF2pUJLPOp1bg+4JNmrnp:nM3muxjWvSiF+UJUFyJWnp
Malware Config
Signatures
Files
-
4fc205955c7c12fce971e664cbad64b674b6d2e815ba0eca6d26b450b391212e.exe windows x86
f7f9f44c59509c0c9ed50eca9bcb28e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
TlsAlloc
WinExec
MultiByteToWideChar
GetWindowsDirectoryW
WideCharToMultiByte
GetModuleFileNameW
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoW
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GlobalAddAtomW
GetLongPathNameA
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
GetProcAddress
GetConsoleAliasExesLengthA
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
IsProcessorFeaturePresent
ReadFile
GetConsoleCP
GetConsoleMode
ConvertDefaultLocale
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateDirectoryA
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetWindowsDirectoryA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
Sleep
CreateFileA
GetTempPathA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileW
LoadLibraryW
WriteConsoleW
HeapReAlloc
SetEndOfFile
GetProcessHeap
LCMapStringW
VirtualProtect
GetStringTypeW
HeapSize
Sections
.text Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ