Static task
static1
Behavioral task
behavioral1
Sample
850f05a1ec8432ac245db8d0ae5d23137fdcc47d1432363a965465bc4e2df4bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
850f05a1ec8432ac245db8d0ae5d23137fdcc47d1432363a965465bc4e2df4bc.exe
Resource
win10v2004-20220812-en
General
-
Target
850f05a1ec8432ac245db8d0ae5d23137fdcc47d1432363a965465bc4e2df4bc
-
Size
219KB
-
MD5
60b524bc81c735b9f3e757bcf1cce3b0
-
SHA1
206cf1e5db409171b42ba533a7a6e7bdf8e5025b
-
SHA256
850f05a1ec8432ac245db8d0ae5d23137fdcc47d1432363a965465bc4e2df4bc
-
SHA512
6a6655e3a5255674c15c3ba46c52fa1851dd898842de261bae2762fb38d18dd02e33f23b2f74334c9889d275aa825f85c6f8862e34391dafe9a8d0a1775f8d15
-
SSDEEP
6144:6GtX+A5+FQ9HUdGB0C7wq1213XT/X4LlJvWwe5PsW2QzXvz:v+SjFUdej7TYT/X4LvBWHTb
Malware Config
Signatures
Files
-
850f05a1ec8432ac245db8d0ae5d23137fdcc47d1432363a965465bc4e2df4bc.exe windows x86
ef911c516294e58d1b331109dc3b8134
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetStartupInfoA
LeaveCriticalSection
SleepEx
GetPrivateProfileIntA
GetFileAttributesA
GetTickCount
lstrcpyA
FindFirstFileA
TryEnterCriticalSection
FlushInstructionCache
EnumResourceNamesA
LockFileEx
WriteFileGather
SystemTimeToFileTime
FileTimeToSystemTime
SetStdHandle
GetTimeZoneInformation
FindNextFileA
GetVersionExA
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateThread
CreateDirectoryA
VirtualProtectEx
GlobalFree
GetFileAttributesExA
lstrlenA
FindResourceA
CreateEventA
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ