Static task
static1
Behavioral task
behavioral1
Sample
0313615d68ed1a98bb1e76034fac8e564d7c503075f8dd96f25cdaf26ca54c62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0313615d68ed1a98bb1e76034fac8e564d7c503075f8dd96f25cdaf26ca54c62.exe
Resource
win10v2004-20220901-en
General
-
Target
0313615d68ed1a98bb1e76034fac8e564d7c503075f8dd96f25cdaf26ca54c62
-
Size
516KB
-
MD5
45a9c4ef091ff88aa92820f1f3a65460
-
SHA1
ac09d92331f4bfea6e6c0686e65f6dd4ed80bc9b
-
SHA256
0313615d68ed1a98bb1e76034fac8e564d7c503075f8dd96f25cdaf26ca54c62
-
SHA512
7608332ab7d5a46a08932433fee2179dde22326e7f1f9bfaf6c10d26c37f7341fff40383a4b625ba2f0447779724e88660d97517887f311d569213065ceafd8e
-
SSDEEP
12288:ZBBvUqds9+76VPbqn6+V1sD2PK90djD2maMYkdE:ZTUqdso7Mz+6szPgejD2yYkdE
Malware Config
Signatures
Files
-
0313615d68ed1a98bb1e76034fac8e564d7c503075f8dd96f25cdaf26ca54c62.exe windows x86
cccef5d3e19f7531a86e77b3e1831f64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapAlloc
HeapFree
GetLastError
GetTickCount
GetProcessHeap
CreateMutexW
Sleep
GetVersionExW
MultiByteToWideChar
lstrlenA
GetCommandLineW
FindFirstFileW
GetShortPathNameW
DeleteFileW
MoveFileExW
GetPrivateProfileSectionW
SetFileAttributesW
GetFileAttributesW
WritePrivateProfileSectionW
GetModuleFileNameW
CreateFileW
lstrcmpW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
lstrlenW
lstrcpyW
MulDiv
SetLastError
GetProcAddress
LoadLibraryExW
GetModuleHandleW
GetSystemDirectoryW
GlobalAlloc
GlobalFree
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
GetDiskFreeSpaceW
GetCurrentProcessId
lstrcpynW
GetLocalTime
GetFileInformationByHandle
GetTempFileNameW
DosDateTimeToFileTime
OutputDebugStringW
GetVolumeInformationW
lstrcatA
RemoveDirectoryW
lstrcpyA
SetFileTime
LocalFileTimeToFileTime
GetDriveTypeW
GetTempPathW
SetErrorMode
CreateProcessW
WideCharToMultiByte
GetCurrentDirectoryW
CompareFileTime
MoveFileW
CreateDirectoryW
WriteFile
WriteConsoleW
ReadFile
WritePrivateProfileStringW
SetFilePointer
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
GetSystemTimeAsFileTime
GetFileType
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetConsoleCP
GetConsoleMode
InterlockedIncrement
InterlockedDecrement
GetVersionExA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
ExitProcess
GetModuleFileNameA
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetFullPathNameW
GetCurrentDirectoryA
SetStdHandle
SetEndOfFile
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
HeapSize
GetTimeFormatA
GetDateFormatA
WriteConsoleA
GetConsoleOutputCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
FlushFileBuffers
InitializeCriticalSection
CreateFileA
GetLocaleInfoW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ