Static task
static1
Behavioral task
behavioral1
Sample
014bd0faa8456fac4308724bf1db41c0836ebde0bce57c208d09a7c36c98d3c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
014bd0faa8456fac4308724bf1db41c0836ebde0bce57c208d09a7c36c98d3c7.exe
Resource
win10v2004-20220812-en
General
-
Target
014bd0faa8456fac4308724bf1db41c0836ebde0bce57c208d09a7c36c98d3c7
-
Size
814KB
-
MD5
df6068d062be3d3d4c6daeb896754f3b
-
SHA1
6f8f15bbbd5cd13a97bf0a003b9e693e10d2c2af
-
SHA256
014bd0faa8456fac4308724bf1db41c0836ebde0bce57c208d09a7c36c98d3c7
-
SHA512
4eec7803f4aa268812718a600a3d8202de2d0a5a0ddd9d1c79c36a494e19fd8d2c3b12d1cbd41c9ec51833eb890ae26ce1c9806a28f3b7d8f7b349a2303a4d80
-
SSDEEP
24576:bMvRM/tD6aNMYip06UmpW7cVW5rui6NOz/lWlwk671G:i2/MYM06LDc9W2M
Malware Config
Signatures
Files
-
014bd0faa8456fac4308724bf1db41c0836ebde0bce57c208d09a7c36c98d3c7.exe windows x86
ade7b67b0a8a0a051be7267b10868645
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocString
VariantInit
VariantClear
kernel32
InterlockedExchange
EnterCriticalSection
GetConsoleOutputCP
ReadFile
GetModuleHandleA
GetCurrentThread
GetTickCount
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetLastError
GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
InterlockedIncrement
VirtualAlloc
CreateFileA
HeapDestroy
SetEndOfFile
Sleep
InterlockedDecrement
FindClose
CreateEventA
VirtualFree
LoadResource
InitializeCriticalSection
SizeofResource
TerminateProcess
GetOEMCP
GetStringTypeW
HeapReAlloc
GetACP
GetSystemTimeAsFileTime
ResetEvent
SetUnhandledExceptionFilter
FindFirstFileA
FlushFileBuffers
TlsFree
GetModuleFileNameW
WideCharToMultiByte
CloseHandle
CompareStringA
SetFilePointer
HeapCreate
InterlockedCompareExchange
GetProcAddress
FreeEnvironmentStringsW
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
LockResource
GetEnvironmentStrings
LoadLibraryExA
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
LoadLibraryA
GetVersionExA
VirtualProtect
GlobalUnlock
TlsAlloc
GetThreadLocale
IsDebuggerPresent
QueryPerformanceCounter
FreeLibrary
SetEvent
GlobalFree
GetFileAttributesA
lstrlenA
user32
DestroyWindow
SetTimer
InvalidateRect
SendMessageA
GetSystemMetrics
DrawTextA
PeekMessageA
TranslateMessage
EnableWindow
GetWindowRect
LoadBitmapA
SetForegroundWindow
Sections
.text Size: 773KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ