Static task
static1
Behavioral task
behavioral1
Sample
d3a1321d449139cc9eeda2f70c0fd98dcdcc701ab8c95eab613b0f7365030d97.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d3a1321d449139cc9eeda2f70c0fd98dcdcc701ab8c95eab613b0f7365030d97.exe
Resource
win10v2004-20220901-en
General
-
Target
d3a1321d449139cc9eeda2f70c0fd98dcdcc701ab8c95eab613b0f7365030d97
-
Size
567KB
-
MD5
280039587719280626be90d1d9a4be77
-
SHA1
e85d04aa79fd2ff9f4d9e31ab3221ce14e7db4c8
-
SHA256
d3a1321d449139cc9eeda2f70c0fd98dcdcc701ab8c95eab613b0f7365030d97
-
SHA512
45fe26a19a8c172075922fb95e79ed67ae4985693f04ee0fe70ccab39c4c4d81849052132e175003013febd2b2cb839078f0c78cd67bdb01176ec1cb762c34a6
-
SSDEEP
12288:5m/vKojzQiA0o27iTgC5LI/VCM9VMAj9cNe5H951DMcvS974GiS8bKNB85:IvHCN5LI/zCehd4cvM74HL
Malware Config
Signatures
Files
-
d3a1321d449139cc9eeda2f70c0fd98dcdcc701ab8c95eab613b0f7365030d97.exe windows x86
14132a07914f07fab56ba732b234eaef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
FlushFileBuffers
IsValidCodePage
InitializeCriticalSection
GetStartupInfoW
GetProcAddress
GetCurrentProcessId
TerminateProcess
SetHandleCount
GetThreadSelectorEntry
IsDebuggerPresent
ReadConsoleOutputCharacterA
CompareStringA
TlsGetValue
CreateEventW
CloseHandle
GetModuleFileNameW
DeleteCriticalSection
GetEnvironmentStrings
HeapReAlloc
CreateFileA
VirtualAlloc
SetLastError
CompareStringW
HeapDestroy
VirtualFree
WriteConsoleW
HeapAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
WaitForMultipleObjects
LeaveCriticalSection
SetUnhandledExceptionFilter
ExitProcess
IsValidLocale
CreateMutexA
WriteFile
MultiByteToWideChar
GetProcessHeap
LCMapStringW
SetEnvironmentVariableA
GetConsoleOutputCP
lstrcpy
Sleep
GetModuleFileNameA
GetEnvironmentStringsW
lstrcmpi
TlsSetValue
GetCommandLineW
GetLocaleInfoA
InterlockedExchange
GetStringTypeA
ReadFile
FreeLibrary
GetOEMCP
GetUserDefaultLCID
EnterCriticalSection
GetConsoleCP
HeapSize
TlsFree
GetSystemTimeAsFileTime
InterlockedDecrement
TlsAlloc
InterlockedIncrement
GetLocaleInfoW
GetTickCount
HeapFree
GetStdHandle
GetModuleHandleA
SystemTimeToFileTime
OpenMutexA
GetCurrentThreadId
HeapCreate
ExitThread
GetDateFormatA
GetCurrentThread
GetLastError
WriteConsoleA
GetCurrentProcess
LCMapStringA
UnhandledExceptionFilter
LoadLibraryA
GetTimeFormatA
RtlUnwind
QueryPerformanceCounter
ReadConsoleW
SetFilePointer
FormatMessageW
GetFileType
GetTimeZoneInformation
GetVersionExA
GetConsoleMode
GetACP
GetCPInfo
FreeEnvironmentStringsA
GetStringTypeW
SetConsoleCtrlHandler
EnumTimeFormatsW
VirtualQuery
EnumSystemLocalesA
GetStartupInfoA
SetStdHandle
user32
RegisterWindowMessageW
RegisterClassA
MenuItemFromPoint
LookupIconIdFromDirectory
DialogBoxIndirectParamW
RegisterClassExA
shell32
SHEmptyRecycleBinW
comctl32
InitCommonControlsEx
Sections
.text Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 317KB - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ