Static task
static1
Behavioral task
behavioral1
Sample
33e04ed220baaafc62fc8f4ccb42bab155388e7e731941de91d818fb4e50db5e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33e04ed220baaafc62fc8f4ccb42bab155388e7e731941de91d818fb4e50db5e.exe
Resource
win10v2004-20220812-en
General
-
Target
33e04ed220baaafc62fc8f4ccb42bab155388e7e731941de91d818fb4e50db5e
-
Size
839KB
-
MD5
38e4996ae228832cb14e5a1c02ba2cf3
-
SHA1
53becad2cde7897e6169eafa1b00976f8ac3eb4e
-
SHA256
33e04ed220baaafc62fc8f4ccb42bab155388e7e731941de91d818fb4e50db5e
-
SHA512
ba65179be59d87118a0a7e12927c8c163688c33a5d4fbeb3e7146b3a762275306dabec37c890ae75353015a322330d914f3468e10487265472b8648d78f7f066
-
SSDEEP
24576:/WxhCicVPrYnQi6hMLZUygWB7IHu1eT6jw2HkrX:exhlc1cndRLZUygWWO1m6U2E7
Malware Config
Signatures
Files
-
33e04ed220baaafc62fc8f4ccb42bab155388e7e731941de91d818fb4e50db5e.exe windows x86
0b7a517b68742ce72b5cb55fb17fb57c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCommandLineA
GetLastError
GetCurrentThread
GetVersion
GetTickCount
GetCurrentProcessId
GetModuleHandleA
ExitProcess
HeapAlloc
GetProcessHeap
HeapCreate
GetModuleFileNameW
CreateFileA
Sleep
TlsGetValue
VirtualFree
VirtualQuery
LoadResource
InitializeCriticalSection
LoadLibraryW
LocalFree
GetOEMCP
GetSystemDirectoryA
FindNextFileA
CompareStringA
InterlockedIncrement
WriteFile
SetUnhandledExceptionFilter
MapViewOfFile
GetCPInfo
RaiseException
CreateMutexA
InterlockedCompareExchange
GetProcAddress
IsDebuggerPresent
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
WideCharToMultiByte
GetConsoleOutputCP
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
GetModuleFileNameA
GetFileSize
GetFileAttributesW
GetVersionExA
TlsAlloc
HeapDestroy
QueryPerformanceCounter
SetEvent
GetFileAttributesA
FileTimeToSystemTime
SetHandleCount
LCMapStringW
HeapFree
user32
EnableWindow
GetSystemMetrics
LoadStringA
EndDialog
SetWindowPos
GetParent
DestroyWindow
Sections
.text Size: 803KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ