Static task
static1
Behavioral task
behavioral1
Sample
33a26fef86446904ac54eb083e08965542f9c8ea1c9dd45b1ca233d282927c63.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33a26fef86446904ac54eb083e08965542f9c8ea1c9dd45b1ca233d282927c63.exe
Resource
win10v2004-20220812-en
General
-
Target
33a26fef86446904ac54eb083e08965542f9c8ea1c9dd45b1ca233d282927c63
-
Size
1.1MB
-
MD5
314997cb9c72c16499ada4e26cb5e7f3
-
SHA1
a5ccbdfe9a450750151551e830acbe0ffe680065
-
SHA256
33a26fef86446904ac54eb083e08965542f9c8ea1c9dd45b1ca233d282927c63
-
SHA512
ed55bdc40439b9800b51a23aab2951a3038a21c3689b61cfbdd8c94564ed9d5b6bd6805b92339e9ea8c314fd111c30b4122a80b9e32cefb6463bf0a4d8bfffaa
-
SSDEEP
24576:cvWemcHS6h9gJLn+bg2AAmHngprHQ5BxTMG:ogcHbtWHgprQLpMG
Malware Config
Signatures
Files
-
33a26fef86446904ac54eb083e08965542f9c8ea1c9dd45b1ca233d282927c63.exe windows x86
93cd99753d7e990639202b516f015590
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetCurrentThread
GetVersion
GetCurrentProcessId
GetSystemDefaultLangID
GetUserDefaultLangID
GetSystemDefaultLCID
GetCurrentProcess
GetCommandLineA
GetLastError
GetModuleHandleA
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
InterlockedIncrement
Sleep
GetStringTypeW
HeapReAlloc
GetProcAddress
FindFirstFileW
FreeEnvironmentStringsW
IsDebuggerPresent
WriteFile
InterlockedExchange
GetCurrentThreadId
SetEnvironmentVariableA
GetModuleFileNameW
LoadLibraryA
SetHandleCount
HeapDestroy
TlsGetValue
Sections
.text Size: 332KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 902B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ