Static task
static1
Behavioral task
behavioral1
Sample
79729ed7764ead3c7cc99e2d76103483530aed656968a381cb131f25d3546174.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79729ed7764ead3c7cc99e2d76103483530aed656968a381cb131f25d3546174.exe
Resource
win10v2004-20220812-en
General
-
Target
79729ed7764ead3c7cc99e2d76103483530aed656968a381cb131f25d3546174
-
Size
184KB
-
MD5
6548d606409222bd9f0f19decd167100
-
SHA1
90489def988018719f056913d51b7ef1a7446ef7
-
SHA256
79729ed7764ead3c7cc99e2d76103483530aed656968a381cb131f25d3546174
-
SHA512
eb067d68bd2589fcf0e0f775554a48ae92af8f780c5e7beb95c3d7905959f4a4b463da42b69e263fe33f94f148213e04f72791a9fd10a430129aa9effc608513
-
SSDEEP
3072:XZ9HvLJ/IpE/ZhyurK4aSCMZa4HIrIFDbtkG1tYqNWAP89F:XZ9zqpiSB4975HIkFDbtkGQqAQ89
Malware Config
Signatures
Files
-
79729ed7764ead3c7cc99e2d76103483530aed656968a381cb131f25d3546174.exe windows x86
05c17fb73eacabb732a05213f1f7096a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
SetEvent
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
Sleep
DeleteCriticalSection
VirtualFree
EnterCriticalSection
VirtualAlloc
GetLastError
ResetEvent
GetTickCount
InterlockedExchange
CancelIo
GetLocalTime
GetCurrentProcessId
DeleteFileA
CreateDirectoryA
GetFileAttributesA
lstrcpyA
lstrlenA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
LocalReAlloc
LocalAlloc
GetFileSize
ReadFile
SetFilePointer
MoveFileA
CreateProcessA
InitializeCriticalSection
lstrcatA
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetStartupInfoA
WaitForMultipleObjects
LocalSize
TerminateProcess
OpenProcess
GetCurrentThreadId
GetSystemInfo
GetComputerNameA
GetVersionExA
GetCurrentProcess
HeapFree
HeapAlloc
InterlockedDecrement
OpenEventA
SetErrorMode
MultiByteToWideChar
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
GetOEMCP
RtlUnwind
RaiseException
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
LeaveCriticalSection
TlsAlloc
SetLastError
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
IsBadReadPtr
IsBadCodePtr
InterlockedIncrement
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
ole32
OleRun
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
wininet
InternetOpenUrlA
InternetReadFile
InternetOpenA
Sections
.data Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE