Static task
static1
Behavioral task
behavioral1
Sample
8180601ed577a76e48478f463ff49c99683b6bc3f4858fca1346072304450f1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8180601ed577a76e48478f463ff49c99683b6bc3f4858fca1346072304450f1f.exe
Resource
win10v2004-20220901-en
General
-
Target
8180601ed577a76e48478f463ff49c99683b6bc3f4858fca1346072304450f1f
-
Size
266KB
-
MD5
965ed5e659411686f86ed472051b5564
-
SHA1
ccfd665d0e57a21bdf25f9c6237284f29903b886
-
SHA256
8180601ed577a76e48478f463ff49c99683b6bc3f4858fca1346072304450f1f
-
SHA512
72c9cdc07e6de01f59bbbc92dfac41cdcb4aef6c0e912063cd4375e9d4991bd354a69706ae47866aa6f3c4f12efda34425f2d4291210898eae03556adec3cf85
-
SSDEEP
6144:n/ZVhdmCaHRxaiXpu0O0ljDWD8gcmPsa/SI60:n/7H2x9XpG0lrmPsa/E0
Malware Config
Signatures
Files
-
8180601ed577a76e48478f463ff49c99683b6bc3f4858fca1346072304450f1f.exe windows x86
f11ce29e42af1243500cd36a638061c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
kernel32
LocalAlloc
GetModuleFileNameA
GetCurrentThreadId
LeaveCriticalSection
GetStdHandle
GetEnvironmentStringsA
TlsGetValue
QueryPerformanceCounter
MapViewOfFile
GetStringTypeW
GetCPInfo
SetLastError
GetModuleHandleA
GetCurrentProcess
GetProcAddress
IsValidLocale
GetSystemTimeAsFileTime
HeapAlloc
VirtualFree
CompareStringA
GetTimeZoneInformation
GetStringTypeA
SetConsoleCtrlHandler
IsBadWritePtr
FreeEnvironmentStringsA
TlsSetValue
TlsAlloc
LocalUnlock
FreeEnvironmentStringsW
GetCommandLineA
GetVersionExA
GetLocaleInfoW
HeapFree
EnumCalendarInfoW
GetTickCount
EnumCalendarInfoA
LoadLibraryA
MultiByteToWideChar
EnterCriticalSection
GetEnvironmentStrings
GetTempFileNameW
DeleteCriticalSection
TerminateProcess
GlobalAddAtomA
EnumDateFormatsExW
CompareStringW
GetStringTypeExW
GetCurrentThread
GetLocaleInfoA
GetConsoleCursorInfo
EnumTimeFormatsW
GetACP
FindResourceExA
GetComputerNameA
RtlUnwind
GetLastError
WriteFile
HeapReAlloc
InterlockedExchange
lstrcmpW
IsValidCodePage
HeapSize
HeapDestroy
VirtualProtect
VirtualAlloc
GetStartupInfoA
EnumSystemLocalesA
TlsFree
GetOEMCP
SetEnvironmentVariableA
GetStartupInfoW
GetUserDefaultLCID
HeapCreate
GetFileType
GetSystemTime
SetFileTime
GetTimeFormatA
ExitProcess
GetCurrentProcessId
CommConfigDialogA
SetHandleCount
LCMapStringW
WriteProfileStringW
LCMapStringA
UnhandledExceptionFilter
EnumDateFormatsExA
InitializeCriticalSection
GetDateFormatA
VirtualQuery
WideCharToMultiByte
GetCompressedFileSizeW
GetEnvironmentStringsW
lstrcpy
GetSystemInfo
Sections
.text Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ