Static task
static1
Behavioral task
behavioral1
Sample
afcb0cf39c765ad06b20357b1c3fd28f77cd68e244ad1f5971100473412ba28e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afcb0cf39c765ad06b20357b1c3fd28f77cd68e244ad1f5971100473412ba28e.exe
Resource
win10v2004-20220812-en
General
-
Target
afcb0cf39c765ad06b20357b1c3fd28f77cd68e244ad1f5971100473412ba28e
-
Size
148KB
-
MD5
36764d7c94e266ba4d08189494d78bc9
-
SHA1
46f11bbe58ebcf3a9f7b84d243b5d4416856c91a
-
SHA256
afcb0cf39c765ad06b20357b1c3fd28f77cd68e244ad1f5971100473412ba28e
-
SHA512
36b50af90e86dda6fa961ed10daf7d060ede6c19bd53632b130c7b1db1451e388364fdc57eb82b7dd41225036a17fc514cdfe8c29d1de18d4cb5d32fe7c222f2
-
SSDEEP
1536:dabrQON9MUE2B6ILBmNWEkOagpdjNfH1osVm6/s0OWuCJXUamc:gFMO0uBmEEkOagpdjRH1osVx/C2Q
Malware Config
Signatures
Files
-
afcb0cf39c765ad06b20357b1c3fd28f77cd68e244ad1f5971100473412ba28e.exe windows x86
5c3aaf929f07b9e40f6e6ba64b80c57d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
Sleep
WideCharToMultiByte
LocalFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
lstrlenA
user32
LoadAcceleratorsA
LoadStringA
DefWindowProcA
PostQuitMessage
DestroyWindow
EndPaint
BeginPaint
ShowWindow
UpdateWindow
PostMessageA
SendMessageA
CreateWindowExA
GetClientRect
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
gdi32
GetStockObject
ole32
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocString
GetActiveObject
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
msvcr80
_lock
_CIsin
_CIcos
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
atoi
atof
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
sprintf
free
malloc
__CxxFrameHandler3
_CxxThrowException
memset
_unlock
_encode_pointer
__dllonexit
_CIpow
_onexit
_decode_pointer
Sections
.text Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE