Static task
static1
Behavioral task
behavioral1
Sample
144a8bbfc7df29084439d58df81871b8d6dd4e67c5935ff6f3c8eea2e82b260c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
144a8bbfc7df29084439d58df81871b8d6dd4e67c5935ff6f3c8eea2e82b260c.exe
Resource
win10v2004-20220812-en
General
-
Target
144a8bbfc7df29084439d58df81871b8d6dd4e67c5935ff6f3c8eea2e82b260c
-
Size
108KB
-
MD5
6e0ceb24ac42e3e2dcb8ba3d359602e0
-
SHA1
cf66281aa105724b46cde4a8a43485b59f3d38c8
-
SHA256
144a8bbfc7df29084439d58df81871b8d6dd4e67c5935ff6f3c8eea2e82b260c
-
SHA512
25f6e9237ceaa8128e1ad10241681f06352da2210aaaa2a2e676de3333ab869b589473189546125e137d23b52ace5f658779f5ad4823e2573d571e7d294a681b
-
SSDEEP
3072:T2a1blBCw1eO8M6Pi5go2cD/E+PPbO4k6Sca:L132i6PAXrXrr
Malware Config
Signatures
Files
-
144a8bbfc7df29084439d58df81871b8d6dd4e67c5935ff6f3c8eea2e82b260c.exe windows x86
87d5c33d04aa608abaa887a0324dade1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
VirtualFree
GetProcessHeap
WideCharToMultiByte
GetFileType
GetProcAddress
HeapFree
GetCurrentThreadId
GetVersionExA
SetHandleCount
ReadFile
SetEvent
CreateThread
LoadResource
HeapAlloc
GetStringTypeW
GlobalAlloc
HeapDestroy
DeleteFileA
GlobalAddAtomA
GetDateFormatA
FindResourceA
LockResource
GetDiskFreeSpaceA
VirtualAllocEx
GetEnvironmentStrings
lstrcmpiA
GetFileAttributesA
ExitThread
lstrlenA
VirtualAlloc
GetOEMCP
MoveFileExA
GlobalDeleteAtom
EnterCriticalSection
GetCPInfo
GetCommandLineA
GetModuleHandleW
GetModuleFileNameA
WriteFile
CreateFileA
CloseHandle
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetTickCount
LoadLibraryExA
GetACP
FindFirstFileA
LoadLibraryA
RaiseException
GetLocaleInfoA
EnumCalendarInfoA
GetVersion
GetCurrentThread
user32
UnregisterClassA
GetScrollPos
OemToCharA
Sections
CODE Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ