Static task
static1
Behavioral task
behavioral1
Sample
284d9569b524ea0e936b40ee7f201ea19d0730b63ea6d735f98f65b5b62b4401.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
284d9569b524ea0e936b40ee7f201ea19d0730b63ea6d735f98f65b5b62b4401.exe
Resource
win10v2004-20220901-en
General
-
Target
284d9569b524ea0e936b40ee7f201ea19d0730b63ea6d735f98f65b5b62b4401
-
Size
249KB
-
MD5
6513cda52c785b95da80a7397979b468
-
SHA1
3f1b56c4de86ec7d4dbb8513106d60772521f150
-
SHA256
284d9569b524ea0e936b40ee7f201ea19d0730b63ea6d735f98f65b5b62b4401
-
SHA512
402ebed119448cf592ee5f85bdd1b8219725fc051cc5013f1ed8e281012a5366c76ba5c26f38256c660bc874fbfbcdf29a06369986966ecc83d03e44cf3c31eb
-
SSDEEP
6144:ebjFFyZaP8MOntdgFKdfUVNXBtFKm4Sn4ZpnJf:eHFFUfkvRtFH4Sgnh
Malware Config
Signatures
Files
-
284d9569b524ea0e936b40ee7f201ea19d0730b63ea6d735f98f65b5b62b4401.exe windows x86
01f98327eba33fc0904998d1c4e064dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
kernel32
LocalAlloc
GetCurrentProcessId
IsBadReadPtr
lstrcpynA
GetVersionExA
GetFileType
TerminateProcess
GlobalFree
GetStartupInfoA
QueryPerformanceCounter
LocalReAlloc
IsBadWritePtr
InterlockedIncrement
GlobalHandle
GetExitCodeProcess
GetThreadLocale
HeapCreate
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapSize
SizeofResource
TlsAlloc
ExitProcess
SetFilePointer
GetACP
GetCurrentThread
GetOEMCP
TlsFree
VirtualFree
TlsGetValue
SetStdHandle
HeapAlloc
ReadFile
VirtualProtect
RtlUnwind
RaiseException
EnumResourceLanguagesW
TlsSetValue
CompareStringA
HeapDestroy
GetLastError
HeapReAlloc
FreeResource
GlobalDeleteAtom
oleaut32
DispGetIDsOfNames
VariantInit
OleTranslateColor
RevokeActiveObject
SetErrorInfo
VariantClear
SysReAllocStringLen
msvcrt
_controlfp
Sections
.text Size: 163KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ