Static task
static1
Behavioral task
behavioral1
Sample
269e31c448e9220938205b4b3b52d33e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
269e31c448e9220938205b4b3b52d33e.exe
Resource
win10v2004-20220812-en
General
-
Target
269e31c448e9220938205b4b3b52d33e.exe
-
Size
10.9MB
-
MD5
269e31c448e9220938205b4b3b52d33e
-
SHA1
992a5185cd0febf01d7c1a3d2c86a0c30c1d4db7
-
SHA256
fc98c3857677400a20b9566b27584b31a4b79d81a650adb43d5f804d9f64a03e
-
SHA512
fdcd01abcd1264a0ed02830587f99e02abca21169e6deb2342e1b7a525d352505d6cacdbec933783a4a90b99aa601904cb16fe3a141d6a95ed231173b60e9409
-
SSDEEP
196608:VlBY39BY/mxUBYpv0QlFQ7FdV/haX2Yt21yVdcvJYmx6E:
Malware Config
Signatures
Files
-
269e31c448e9220938205b4b3b52d33e.exe.exe windows x86
0c99f5658006eab709fca9857fdf20b2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
lstrcmpiA
GetConsoleWindow
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetModuleHandleA
QueryPerformanceCounter
Sleep
user32
ShowWindow
vcruntime140
memset
__current_exception
__current_exception_context
_except_handler4_common
__FrameUnwindFilter
api-ms-win-crt-runtime-l1-1-0
terminate
_controlfp_s
_crt_atexit
abort
_register_onexit_function
_c_exit
_cexit
__p___argv
__p___argc
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
mscoree
_CorExeMain
Sections
.text Size: 10.5MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ