Static task
static1
Behavioral task
behavioral1
Sample
810ffd6bc093f5a4653ed4f458420d46c164ea1066859021931be70faacd4a5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
810ffd6bc093f5a4653ed4f458420d46c164ea1066859021931be70faacd4a5b.exe
Resource
win10v2004-20220812-en
General
-
Target
810ffd6bc093f5a4653ed4f458420d46c164ea1066859021931be70faacd4a5b
-
Size
224KB
-
MD5
49607669765871494c9dca450919d534
-
SHA1
5c9825bc8b4f7697191be86afae413b69b114d71
-
SHA256
810ffd6bc093f5a4653ed4f458420d46c164ea1066859021931be70faacd4a5b
-
SHA512
67aeae89d6624562b748f763b898a88ec4f737bdb415a4b5d3c81571d2a532e94838b6357d58250a3d6f7e21020311460b5c89f50f5a4f690aafa1c3dbadc714
-
SSDEEP
6144:I0lmSohApFcSrGyAInflK2uXQHjlSvUhpiJ:I0Xocc4JAInsrXYhkUhp0
Malware Config
Signatures
Files
-
810ffd6bc093f5a4653ed4f458420d46c164ea1066859021931be70faacd4a5b.exe windows x86
ad46c19993067bdc52e09f3c57f82fc8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
HeapSize
RtlUnwind
HeapReAlloc
lstrlenA
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetProcAddress
ole32
CoRegisterMallocSpy
StringFromGUID2
CLSIDFromString
comdlg32
GetOpenFileNameA
shlwapi
StrStrA
shell32
ShellExecuteExW
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ