Static task
static1
Behavioral task
behavioral1
Sample
95b4a8bd484eb6b50220d36a80e6b1253a5abf234bd4a3c89f8d69e95dcb431a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95b4a8bd484eb6b50220d36a80e6b1253a5abf234bd4a3c89f8d69e95dcb431a.exe
Resource
win10v2004-20220901-en
General
-
Target
95b4a8bd484eb6b50220d36a80e6b1253a5abf234bd4a3c89f8d69e95dcb431a
-
Size
856KB
-
MD5
653657602149c1219f9b6acc4c05b21e
-
SHA1
23c1d17f5f1bc5129e271930a9241168208eb0d7
-
SHA256
95b4a8bd484eb6b50220d36a80e6b1253a5abf234bd4a3c89f8d69e95dcb431a
-
SHA512
e15ead254ae75a31630a260bf7261e4190e2d463c90f82db194f5beddb0e03efdcee217e15edc2d1f4586c270e0627ae58bd8cb256b4e8e4eeef7d49852f952f
-
SSDEEP
12288:AkYifzhIPhLWU0I10kPnkwT+BaPbJY6bJ/BOu2/nnOdmXWCe03qJFBU:AYC8U3CkswTiazJN+D6mXIS
Malware Config
Signatures
Files
-
95b4a8bd484eb6b50220d36a80e6b1253a5abf234bd4a3c89f8d69e95dcb431a.exe windows x86
93fd0515c5e13f81dc96d6ce1841c525
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
GetLocaleInfoW
SetCurrentDirectoryA
FlushFileBuffers
DeleteCriticalSection
GetVersionExA
FileTimeToSystemTime
GetFileAttributesA
TlsFree
GetCurrentProcess
SetEndOfFile
FindFirstFileA
GetTickCount
WriteFile
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableW
HeapFree
CreateThread
MultiByteToWideChar
GetFileType
HeapReAlloc
GetExitCodeThread
HeapAlloc
FindClose
GetFullPathNameA
TerminateProcess
ExitThread
SetEnvironmentVariableA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentDirectoryA
EnterCriticalSection
FindNextFileA
SetLastError
GetStartupInfoA
ExitProcess
LeaveCriticalSection
WideCharToMultiByte
GetCurrentProcessId
GetStdHandle
GetCurrentThreadId
SetHandleCount
FileTimeToLocalFileTime
GetLocaleInfoA
CloseHandle
ReadFile
ole32
CoInitialize
CoUninitialize
ntdll
tolower
msvcrt
gmtime
puts
printf
time
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 736KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ