Static task
static1
Behavioral task
behavioral1
Sample
95b107fed6499ed48dea071f07362a34289f5600c37a70b641e8d4676df78a80.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95b107fed6499ed48dea071f07362a34289f5600c37a70b641e8d4676df78a80.exe
Resource
win10v2004-20220812-en
General
-
Target
95b107fed6499ed48dea071f07362a34289f5600c37a70b641e8d4676df78a80
-
Size
330KB
-
MD5
6a4b1cfb80bdb519dcd780cf3394de20
-
SHA1
e14344457221584f5ae03f041eeddcec1c941597
-
SHA256
95b107fed6499ed48dea071f07362a34289f5600c37a70b641e8d4676df78a80
-
SHA512
46acb4dc1311a7e0f016f44b3c8cf1d140b65bd5de57c2566d85f0289a91e10fba9df9493c8a8ad3c838d6b4ff85c1343dcd80b24f52876f3eb2703f3a6d417f
-
SSDEEP
6144:wikrw8J6L91p9xzyohKhRcIERqcKvl9W695OHIue/Ytijm/:M8iE93jkIIEwc6l9W62Hht
Malware Config
Signatures
Files
-
95b107fed6499ed48dea071f07362a34289f5600c37a70b641e8d4676df78a80.exe windows x86
fc5596f84aaf38fe7ba3a01788264282
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageW
LoadStringW
kernel32
GetModuleHandleExW
RaiseException
GlobalGetAtomNameA
VirtualAlloc
GetModuleHandleW
GetProcAddress
GetLastError
LoadLibraryW
FreeLibrary
SetCurrentDirectoryW
CloseHandle
UnmapViewOfFile
SetEvent
ResetEvent
OpenEventW
MapViewOfFile
OpenFileMappingW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
VirtualFree
GetCommandLineW
SetLastError
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
ExitProcess
LoadLibraryExA
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
DeleteCriticalSection
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
RtlUnwind
HeapAlloc
HeapReAlloc
WideCharToMultiByte
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
Sections
.text Size: 206KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ