Static task
static1
Behavioral task
behavioral1
Sample
f004e9ccbd1d6013bb19cfab05b567fc3900aea87573ca9a92ad629dc3703cac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f004e9ccbd1d6013bb19cfab05b567fc3900aea87573ca9a92ad629dc3703cac.exe
Resource
win10v2004-20220901-en
General
-
Target
f004e9ccbd1d6013bb19cfab05b567fc3900aea87573ca9a92ad629dc3703cac
-
Size
257KB
-
MD5
186880a9ea5373b03c7c76ab71f168db
-
SHA1
66c3f39b00675246a248a6b3237883fa98690d9d
-
SHA256
f004e9ccbd1d6013bb19cfab05b567fc3900aea87573ca9a92ad629dc3703cac
-
SHA512
1c0213d3b7b0ce8e95f5c13249d44f7acadfac92ae6e73b760f5a89b325af6dce8ed20bf62ad52a0021f2b3195655897a48f5f1e645907d9f3b39895ae84b4fe
-
SSDEEP
6144:UNK/wYEJKEHHcHxmUSSNW5qLipt8llbVsqXIGQx:UNK/wYEJK6HwrSsWq2pteFXIbx
Malware Config
Signatures
Files
-
f004e9ccbd1d6013bb19cfab05b567fc3900aea87573ca9a92ad629dc3703cac.exe windows x86
697dbf9f45d3b8df1239b3141bbbf225
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
LCMapStringW
MultiByteToWideChar
VirtualFree
GetProcAddress
SetConsoleCtrlHandler
HeapReAlloc
WriteFile
GetCPInfo
HeapCreate
GetCurrentProcessId
HeapAlloc
DeleteCriticalSection
GetModuleHandleW
TlsFree
GetModuleHandleA
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
SetThreadAffinityMask
TlsAlloc
GetStartupInfoW
IsValidCodePage
GetCurrentThread
IsDebuggerPresent
SetLastError
CompareStringW
GetTimeZoneInformation
VirtualLock
GetFileAttributesW
ExitProcess
GetTickCount
GetDiskFreeSpaceA
IsValidLocale
HeapFree
GetLastError
GetModuleFileNameA
InterlockedDecrement
LoadLibraryA
QueryPerformanceCounter
GetFileType
VirtualAlloc
EnumTimeFormatsA
GetCommandLineW
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetLocaleInfoA
GetOEMCP
GetStringTypeA
TlsGetValue
GetTimeFormatA
LeaveCriticalSection
GetDateFormatA
GetSystemTimeAsFileTime
GetLocaleInfoW
FreeEnvironmentStringsW
FlushFileBuffers
GetModuleFileNameW
GetStartupInfoA
EnumSystemLocalesA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedIncrement
EnterCriticalSection
GetStdHandle
TlsSetValue
CompareStringA
LCMapStringA
WideCharToMultiByte
GetStringTypeW
CloseHandle
InterlockedExchange
HeapDestroy
GetUserDefaultLCID
GetEnvironmentStringsW
Sleep
GetACP
FreeLibrary
SetHandleCount
comdlg32
ChooseFontA
GetFileTitleW
GetSaveFileNameA
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ