Static task
static1
Behavioral task
behavioral1
Sample
34ea4754546de812f759f5b0c164b3eb062878082c726238d11c539736474c1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34ea4754546de812f759f5b0c164b3eb062878082c726238d11c539736474c1e.exe
Resource
win10v2004-20220812-en
General
-
Target
34ea4754546de812f759f5b0c164b3eb062878082c726238d11c539736474c1e
-
Size
133KB
-
MD5
a54e5fdb87fc4c4cec768436c9baf6ce
-
SHA1
4372fe05314f35dbd81cfc92a9c5c9ed48e1dc06
-
SHA256
34ea4754546de812f759f5b0c164b3eb062878082c726238d11c539736474c1e
-
SHA512
3db4dd7dbb4cf543e399e1027847242ead06847b620a65ad5bde603349632762783c8b47c2268c9c26107e96312a226c0027c814a24f6cc7ee5b98d4e485b3f7
-
SSDEEP
1536:THqEnGeudQ3ZQ8lxnfPr6OOOOOOOgE0CBw+ySooBzC7GlrWet0RcZiuajhhgMidc:THqqhZFrfPrXHwF7GlrWeIFLdhgzwJX/
Malware Config
Signatures
Files
-
34ea4754546de812f759f5b0c164b3eb062878082c726238d11c539736474c1e.exe windows x86
2bf7f42531ea29a19dc7d26b96a89ff9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
SetFilePointer
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
Sleep
ExitProcess
VirtualAlloc
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
lstrlenA
FindAtomA
WriteConsoleW
SetFilePointerEx
SetStdHandle
RaiseException
RtlUnwind
GetCommandLineA
EncodePointer
DecodePointer
GetLastError
IsProcessorFeaturePresent
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
CreateFileW
user32
GetAltTabInfoA
gdi32
GdiGetBatchLimit
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ