Static task
static1
Behavioral task
behavioral1
Sample
211b85dbc00d94a1638a4150388606b78caaef46d54e38e226f2ee7fcbcbdb3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
211b85dbc00d94a1638a4150388606b78caaef46d54e38e226f2ee7fcbcbdb3c.exe
Resource
win10v2004-20220901-en
General
-
Target
211b85dbc00d94a1638a4150388606b78caaef46d54e38e226f2ee7fcbcbdb3c
-
Size
204KB
-
MD5
7d3555dc74ac1637e83373e9a79ff8e1
-
SHA1
86046f38beb4be30f304fcf757d39fa1711f7b7f
-
SHA256
211b85dbc00d94a1638a4150388606b78caaef46d54e38e226f2ee7fcbcbdb3c
-
SHA512
3ed9c2efc0d270955f37f423c071b9e6564f4f3f26c8509ab41022fc5b84a6b2c7ace3675a45b0e4958c9ae69e1f9299de7bc437747a840c9173fe16f9e05c82
-
SSDEEP
3072:JR6Mj6tCfNaSEtByVIxr8PbEwd4i2d5idsXtTOw0yqSXjy/aBYSyb:J/j6gf0vqV/bh4i+5is2CWyBhy
Malware Config
Signatures
Files
-
211b85dbc00d94a1638a4150388606b78caaef46d54e38e226f2ee7fcbcbdb3c.exe windows x86
4deef0588527c2e3d8550880929543bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
OleSetContainedObject
OleUninitialize
comsvcs
SafeRef
kernel32
GetCurrentThreadId
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEvent
GetCurrentProcess
LoadLibraryW
SetTapeParameters
VirtualProtectEx
GetComputerNameW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ