Static task
static1
Behavioral task
behavioral1
Sample
2b29136f3622d331c86855ab5298b22a996d7f894bd45c4d4a61a9460dfe2095.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2b29136f3622d331c86855ab5298b22a996d7f894bd45c4d4a61a9460dfe2095.exe
Resource
win10v2004-20220901-en
General
-
Target
2b29136f3622d331c86855ab5298b22a996d7f894bd45c4d4a61a9460dfe2095
-
Size
84KB
-
MD5
2f60ef19334491b0800f818fe87c42f9
-
SHA1
a54541d84ffdd10c71053a4da5d2635129c1a5fa
-
SHA256
2b29136f3622d331c86855ab5298b22a996d7f894bd45c4d4a61a9460dfe2095
-
SHA512
97459e126e789b9425e8c6ea4afbc1f61732f98bad1539af6455e7154c72affd2b5ee2a6ad258a0da0fd19fd6b332c797be06aa2a757c0df90eed4f4426d5fe4
-
SSDEEP
1536:S97iRkxTeSbKR0IlzUMp9ok6avzYc/Zt60tNdJ:SRiSxbbq59PxT60tNdJ
Malware Config
Signatures
Files
-
2b29136f3622d331c86855ab5298b22a996d7f894bd45c4d4a61a9460dfe2095.exe windows x86
62ece4054893d325aa81d145d92fe428
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
InterlockedDecrement
GetProcAddress
LoadLibraryA
GetEnvironmentVariableW
lstrcatW
LocalFree
lstrlenA
GetThreadLocale
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
SetFilePointer
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
InterlockedExchange
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
user32
FindWindowA
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
GetErrorInfo
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ