Static task
static1
Behavioral task
behavioral1
Sample
af4495e2b530fc759ec935dd3e159390fcbc8e10028fb1dea3762e9572387713.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af4495e2b530fc759ec935dd3e159390fcbc8e10028fb1dea3762e9572387713.exe
Resource
win10v2004-20220812-en
General
-
Target
af4495e2b530fc759ec935dd3e159390fcbc8e10028fb1dea3762e9572387713
-
Size
1.1MB
-
MD5
67e1eee6f98f828e52e3f30ea4d8e7a0
-
SHA1
4b3a5c9037cccbd79bf4fffc5ac9d157c1d6ae22
-
SHA256
af4495e2b530fc759ec935dd3e159390fcbc8e10028fb1dea3762e9572387713
-
SHA512
d83002686080d95058f13ca0dec352eee06d74b77c614b9f6d498d1dc4a3124cb24d6eaf016ab9cf39959fbb032a643cc5f64232b87555db70c7a2ac60f8ba36
-
SSDEEP
24576:mTFWeHETkyOvLru23b5d0CEWyufQXx4Vp79MRv+i7DTP+exow:S4eHETgLr/gLu9Ub3PRo
Malware Config
Signatures
Files
-
af4495e2b530fc759ec935dd3e159390fcbc8e10028fb1dea3762e9572387713.exe windows x86
b6fdb90e741149b9e204f7aad171598d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
Sleep
GetFileSize
CloseHandle
UnmapViewOfFile
LoadLibraryA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
GetProcAddress
VirtualFree
GetCurrentThread
GetLastError
GetThreadContext
GetModuleHandleExW
IsBadReadPtr
GetEnvironmentVariableW
GetCurrentDirectoryW
HeapFree
GetFileAttributesExW
SetLastError
EnterCriticalSection
WriteFile
DeleteFileA
ExitProcess
TerminateProcess
SetUnhandledExceptionFilter
GetProcessId
WaitForSingleObject
GetLocalTime
SystemTimeToFileTime
GetTickCount
GetTempPathA
GetTempFileNameA
AddVectoredExceptionHandler
RemoveDirectoryA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
HeapAlloc
FreeLibrary
GetFullPathNameW
InterlockedCompareExchange
LeaveCriticalSection
DeleteCriticalSection
GetStringTypeW
RaiseException
RtlUnwind
GetCPInfo
GetCommandLineA
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetModuleFileNameW
HeapSize
IsDebuggerPresent
GetCurrentThreadId
VirtualQuery
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
SetFilePointerEx
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetTimeZoneInformation
OutputDebugStringW
LoadLibraryExW
LoadLibraryW
GetConsoleCP
SetStdHandle
FlushFileBuffers
WriteConsoleW
SetEnvironmentVariableA
user32
MessageBoxA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 801KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ