Static task
static1
Behavioral task
behavioral1
Sample
297337c7ae73c4c03991f85aba74f70aac7f11f2cdc3329b0da157fe1def8ec7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
297337c7ae73c4c03991f85aba74f70aac7f11f2cdc3329b0da157fe1def8ec7.exe
Resource
win10v2004-20220812-en
General
-
Target
297337c7ae73c4c03991f85aba74f70aac7f11f2cdc3329b0da157fe1def8ec7
-
Size
104KB
-
MD5
70691ce276e3e6c0ffed5e8af40d23c0
-
SHA1
1127cbdd7b98cc18fffc0a1868a0090d178dd68e
-
SHA256
297337c7ae73c4c03991f85aba74f70aac7f11f2cdc3329b0da157fe1def8ec7
-
SHA512
2b7c62b3c259b57a5fd02b5ab1c77a95cd949e0320dd6839c66299da820b0b5ee619509594f846a16ef9cb35aff9a1853169296a78052b732f5d53120a8ebcdf
-
SSDEEP
1536:kjFMBYMbeqv+8MU+IQvVqXcwAqdpqZpVX9Cdp+ZQ:U+J3+/3vEMwAqnUtCdp+
Malware Config
Signatures
Files
-
297337c7ae73c4c03991f85aba74f70aac7f11f2cdc3329b0da157fe1def8ec7.exe windows x86
49563a2c349bb4bf1cf25a6cdcd108b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetCurrentThreadId
GetModuleHandleA
InterlockedIncrement
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentProcess
CompareFileTime
GetCurrentThread
GetStartupInfoA
GetModuleHandleW
VirtualAlloc
HeapFree
LocalFree
SetStdHandle
GetStdHandle
InterlockedExchangeAdd
HeapDestroy
LocalAlloc
WaitForSingleObject
EnterCriticalSection
FreeLibrary
SetEvent
GetOEMCP
GetFileType
GetEnvironmentStrings
lstrlenA
CreateMutexW
GlobalAlloc
MultiByteToWideChar
FileTimeToSystemTime
FlushFileBuffers
ReadFile
HeapAlloc
FormatMessageW
GetFileSize
lstrlenW
CloseHandle
FindClose
LoadLibraryExW
CompareStringA
CreateEventW
Sleep
FreeLibraryAndExitThread
TlsGetValue
SetHandleCount
LoadLibraryA
TlsAlloc
WideCharToMultiByte
InitializeCriticalSection
OutputDebugStringA
FindNextFileA
HeapReAlloc
WaitForMultipleObjects
GetVersionExA
ExitProcess
GetEnvironmentStringsW
SetErrorMode
GetVersionExW
CreateThread
GlobalFree
TlsSetValue
FreeEnvironmentStringsA
TerminateProcess
SetFilePointer
GetModuleFileNameA
SizeofResource
RaiseException
GetACP
LCMapStringW
HeapSize
RtlUnwind
IsValidCodePage
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
SetConsoleCtrlHandler
GetCommandLineA
HeapSetInformation
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetProcAddress
DecodePointer
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
TlsFree
SetLastError
GetLastError
HeapCreate
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
GetStringTypeW
user32
GetSystemMetrics
ole32
CoTaskMemFree
OleInitialize
OleLoadFromStream
CoInitialize
CoSetProxyBlanket
CoTaskMemRealloc
msi
ord46
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ