Static task
static1
Behavioral task
behavioral1
Sample
75e6f52f79c75a73d2809befb19891531e6399aeb58ab7c318429c18b9487506.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75e6f52f79c75a73d2809befb19891531e6399aeb58ab7c318429c18b9487506.exe
Resource
win10v2004-20220812-en
General
-
Target
75e6f52f79c75a73d2809befb19891531e6399aeb58ab7c318429c18b9487506
-
Size
276KB
-
MD5
470840ec640b6a78657b271d9f5d6197
-
SHA1
e8e694b3c9b5c03971a93fbb6d37b77d0fe0c90f
-
SHA256
75e6f52f79c75a73d2809befb19891531e6399aeb58ab7c318429c18b9487506
-
SHA512
5909369be773875ddb43916414d8a99237b800f73d08b2852c183108e732c0e41cace7417ea6cacd0c9c9384d155ca5ccb7ad7782b58378c6b2efe3c2d78cee1
-
SSDEEP
3072:UyrTAHWj9HmP7b67ZutOmmedKyv5C3P+5gY8SE3Me0ldAC+RWRDRWjoV4kVf7WxJ:7tmP7b67ZugjG563MnCUfWjjQf7D
Malware Config
Signatures
Files
-
75e6f52f79c75a73d2809befb19891531e6399aeb58ab7c318429c18b9487506.exe windows x86
7df216961111b97a548eaab8abc01af1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
HeapDestroy
InitializeCriticalSection
SetHandleCount
GetProcAddress
InterlockedDecrement
HeapReAlloc
SetUnhandledExceptionFilter
EnterCriticalSection
GetStartupInfoA
GetCurrentProcessId
TlsAlloc
SetVolumeLabelA
GetEnvironmentStrings
TlsFree
WideCharToMultiByte
InterlockedIncrement
SetLocaleInfoA
TlsGetValue
WriteFile
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetTimeZoneInformation
IsValidCodePage
GlobalAddAtomW
GetOEMCP
CreateFileMappingW
SetSystemTime
ExitProcess
GetTickCount
LoadLibraryExW
Sleep
HeapFree
GetCommandLineA
GetModuleFileNameA
GetStringTypeW
LoadLibraryA
QueryPerformanceCounter
GetACP
VirtualAlloc
GetStdHandle
EnumSystemLocalesA
VirtualFree
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetCommandLineW
GetEnvironmentStringsW
GetLocaleInfoW
MultiByteToWideChar
TlsSetValue
HeapSize
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentThread
CompareStringA
GetThreadContext
GetDateFormatA
GetFileType
GetNamedPipeHandleStateA
SetEnvironmentVariableA
IsValidLocale
GetTimeFormatA
GetCPInfo
GetLocaleInfoA
SetConsoleCtrlHandler
GetNamedPipeHandleStateW
HeapCreate
SetLastError
GetModuleFileNameW
SetThreadPriority
InterlockedExchange
GetStartupInfoW
GetProcessHeap
FreeLibrary
LCMapStringA
DeleteCriticalSection
CompareStringW
IsDebuggerPresent
GetVersionExA
HeapAlloc
LeaveCriticalSection
EnumSystemCodePagesA
GetDriveTypeA
GetUserDefaultLCID
VirtualQuery
GetModuleHandleA
LCMapStringW
wininet
InternetReadFile
InternetAlgIdToStringA
InternetConnectW
FreeUrlCacheSpaceA
GopherGetAttributeW
FindFirstUrlCacheEntryA
SetUrlCacheEntryGroupW
FtpSetCurrentDirectoryA
InternetConfirmZoneCrossingW
InternetSetDialState
InternetInitializeAutoProxyDll
CommitUrlCacheEntryW
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ