Static task
static1
Behavioral task
behavioral1
Sample
254c0a17d689a084b0b515bd9786c26867b98a512ebf0b7b8604f474e5a4d497.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
254c0a17d689a084b0b515bd9786c26867b98a512ebf0b7b8604f474e5a4d497.exe
Resource
win10v2004-20220812-en
General
-
Target
254c0a17d689a084b0b515bd9786c26867b98a512ebf0b7b8604f474e5a4d497
-
Size
692KB
-
MD5
80fa45275e51e52ca290e9d7bdfb3227
-
SHA1
ff399db342e6a6e247a1c1da250d3da835e30d0c
-
SHA256
254c0a17d689a084b0b515bd9786c26867b98a512ebf0b7b8604f474e5a4d497
-
SHA512
a73dd51e35bd403a91bedacf2b8a0a9783723e9249e6f33fc86ec41a61347ad058e169ec9e6d2d2cff55156c61b7e20ccc024a5d9b03d982f6066353fefbaca9
-
SSDEEP
12288:5Nw+625NVQCU9LQm/+JL9xu8qMKjD18s2OjL+HZTYCzeSgG+eQQeWTdQcF:Q+pXVQem/+7xbqZ8cjLMbDgGfeWT+c
Malware Config
Signatures
Files
-
254c0a17d689a084b0b515bd9786c26867b98a512ebf0b7b8604f474e5a4d497.exe windows x86
f95ade9afb4a6ca0a8bbd066b027cf60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpandEnvironmentStringsA
GetSystemInfo
GlobalLock
FindResourceW
GetLastError
GetConsoleCP
GetCurrentProcessId
GlobalAlloc
CreateEventA
GetStdHandle
GetTimeFormatA
GetModuleHandleA
GetTempPathA
FindResourceExW
CreateDirectoryA
GetCPInfo
GlobalReAlloc
GetTempFileNameW
GetShortPathNameW
FileTimeToLocalFileTime
FindResourceA
GetModuleHandleW
GetLocalTime
GetStartupInfoA
InterlockedIncrement
HeapFree
DeleteCriticalSection
CopyFileW
GetCurrentDirectoryW
GlobalFree
CreateFileMappingW
GetACP
GetProcessHeap
CloseHandle
GetModuleFileNameW
GetThreadTimes
CreateFileA
IsValidCodePage
LCMapStringW
CreateProcessA
CreateThread
CreateDirectoryW
HeapSize
CopyFileA
GetFileSize
GetTempFileNameA
GetFileTime
InterlockedDecrement
CreateFileMappingA
EnumSystemLocalesA
CreateMutexW
GetVersionExW
FormatMessageA
CreateFileW
GetVersionExA
InterlockedExchange
CreateProcessW
GetConsoleMode
GetTempPathW
IsValidLocale
LCMapStringA
GetVersion
GetLocaleInfoW
CompareStringW
GlobalHandle
GetModuleFileNameA
HeapReAlloc
GetThreadLocale
GetTickCount
FreeLibrary
IsBadReadPtr
GlobalUnlock
ExitThread
CompareStringA
IsBadWritePtr
IsBadStringPtrW
GetSystemTimeAsFileTime
CreateMutexA
GetCurrentDirectoryA
GetLocaleInfoA
InterlockedCompareExchange
InitializeCriticalSection
HeapAlloc
GetSystemTime
GetStartupInfoW
GetShortPathNameA
CreateEventW
GetStringTypeA
GetFileType
GetCurrentThread
HeapDestroy
GetCurrentThreadId
ExitProcess
GetStringTypeW
HeapCreate
VirtualAlloc
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
VirtualFree
RtlUnwind
WriteFile
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
SetFilePointer
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 580KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE