Static task
static1
Behavioral task
behavioral1
Sample
0f3d6a5c4e8853f5d3ee8a96ada3ed53bfd5d97e25523be2541d427ea388600a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f3d6a5c4e8853f5d3ee8a96ada3ed53bfd5d97e25523be2541d427ea388600a.exe
Resource
win10v2004-20220812-en
General
-
Target
0f3d6a5c4e8853f5d3ee8a96ada3ed53bfd5d97e25523be2541d427ea388600a
-
Size
92KB
-
MD5
71d14374165a8ab98f63b3f496055c20
-
SHA1
33a42cac5a81715573ef2aacd26f75d1da1c614b
-
SHA256
0f3d6a5c4e8853f5d3ee8a96ada3ed53bfd5d97e25523be2541d427ea388600a
-
SHA512
0e4ca45a92057883934b7a5b849861aab9e73417e25338c22926979343df252135db340e32955c4d0cee7b8c83569a0987829571ed4888c6c757191fb68fec24
-
SSDEEP
1536:7svWZUxlxP2XrpCH4WAR+Xlq1yuKuU0ORMsOkNZ:Q+yxPhYWdlq85kw
Malware Config
Signatures
Files
-
0f3d6a5c4e8853f5d3ee8a96ada3ed53bfd5d97e25523be2541d427ea388600a.exe windows x86
ccde355ba67c60c8ad42f8db5273e85f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeResource
LockResource
LoadResource
FindResourceA
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetLastError
SetConsoleCtrlHandler
HeapAlloc
GetCommandLineA
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapFree
CloseHandle
GetFileAttributesA
UnhandledExceptionFilter
WriteFile
GetCurrentProcessId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
FlushFileBuffers
SetFilePointer
HeapSize
SetStdHandle
ReadFile
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateFileA
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
InterlockedExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
SetEndOfFile
DeleteFileA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE