Static task
static1
Behavioral task
behavioral1
Sample
33a432cbf665c069cbf476a06b028eddef467d4360c184508e2fc72cd2155096.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33a432cbf665c069cbf476a06b028eddef467d4360c184508e2fc72cd2155096.exe
Resource
win10v2004-20220901-en
General
-
Target
33a432cbf665c069cbf476a06b028eddef467d4360c184508e2fc72cd2155096
-
Size
339KB
-
MD5
6f744def1e5ad65b9995f4f2d0641680
-
SHA1
bf3933525386ee4d144c42a12aa28f0dc9f70e97
-
SHA256
33a432cbf665c069cbf476a06b028eddef467d4360c184508e2fc72cd2155096
-
SHA512
be9be0f02af95f6697ca872967a3b9b838d75dab0061cf992c58943eb1bfa863ff961b21167eadc6b1d92ee766ba71931054e55772c735b7443310962402841c
-
SSDEEP
6144:ZYHqc2Y908OdDMR9Zwk3h/sqrHZ9Tq2pl7eNT53OZIl6214PmURhaH:uHqVY+LYkI3qGU3Os6P1K
Malware Config
Signatures
Files
-
33a432cbf665c069cbf476a06b028eddef467d4360c184508e2fc72cd2155096.exe windows x86
16856bc2850b6686a368ad1765ada873
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetUserDefaultLCID
GetSystemTimeAsFileTime
CloseHandle
lstrcmpA
GetTickCount
GetProcessHeap
GetLocalTime
SetLastError
GetCurrentProcess
SetUnhandledExceptionFilter
HeapAlloc
lstrcpyW
CreateFileA
GetSystemDefaultLangID
HeapFree
WideCharToMultiByte
GetCurrentProcessId
GetSystemInfo
SystemTimeToFileTime
QueryPerformanceCounter
MultiByteToWideChar
fontext
DllGetClassObject
DllCanUnloadNow
fmifs
Format
Chkdsk
FormatEx
Extend
EnableVolumeCompression
DiskCopy
w32topl
ToplSTHeapExtractMin
ToplScheduleCacheCreate
ToplScheduleCreate
ToplScheduleExportReadonly
ToplScheduleCacheDestroy
ToplSTHeapDestroy
ToplSTHeapInit
fontsub
MergeFontPackage
CreateFontPackage
Sections
text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ