CreateInterface
Static task
static1
Behavioral task
behavioral1
Sample
f20a06b349d9e2b10b4430f00ba85e2bb1ca40c26a672c338867ed5ce3aa320c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f20a06b349d9e2b10b4430f00ba85e2bb1ca40c26a672c338867ed5ce3aa320c.exe
Resource
win10v2004-20220901-en
General
-
Target
f20a06b349d9e2b10b4430f00ba85e2bb1ca40c26a672c338867ed5ce3aa320c
-
Size
364KB
-
MD5
485f58403ec439961ff31a951d674f1b
-
SHA1
e9e05e78a5364a7350455aeb532d292b672b44db
-
SHA256
f20a06b349d9e2b10b4430f00ba85e2bb1ca40c26a672c338867ed5ce3aa320c
-
SHA512
554a86cad1a2cf408fe802e9be26801f109e388b372f51b29f4d410d3ca5fb9decf0f8b5fb332fac528027bab37b7d3fbd7be2db0e940c859647ff503e6516b7
-
SSDEEP
6144:tWrRmy5vkfYlPm3zKJbMH+W0YHwjnK8A3+x0jyWEnpXHSlZ4zytbLB:tWU8g92MeW0kwjKpK02Wog4zkV
Malware Config
Signatures
Files
-
f20a06b349d9e2b10b4430f00ba85e2bb1ca40c26a672c338867ed5ce3aa320c.exe windows x86
729d025dfecfa7aeb3685e464089f7f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
SetPriorityClass
GetCurrentProcess
Sleep
QueryPerformanceFrequency
LocalFree
FormatMessageA
GetLastError
LeaveCriticalSection
QueryPerformanceCounter
EnterCriticalSection
SetConsoleTitleA
GetTickCount
GetCurrentProcessId
GetConsoleTitleA
SetConsoleCtrlHandler
GetStdHandle
AllocConsole
FreeConsole
ReadConsoleInputA
GetNumberOfConsoleInputEvents
WriteFile
GetConsoleScreenBufferInfo
WriteConsoleOutputCharacterA
WriteConsoleOutputAttribute
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
RtlUnwind
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
CreateDirectoryA
WideCharToMultiByte
IsBadReadPtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetFilePointer
GetACP
GetOEMCP
SetStdHandle
GetLocaleInfoW
CloseHandle
user32
wsprintfA
FindWindowA
ShowWindow
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ