Static task
static1
Behavioral task
behavioral1
Sample
214c945b81cc7b6841bf9e74d87043c2ba29c9d52f4c6244690fc0d16c5cc014.exe
Resource
win7-20220901-en
General
-
Target
214c945b81cc7b6841bf9e74d87043c2ba29c9d52f4c6244690fc0d16c5cc014
-
Size
195KB
-
MD5
8057df2f03f03589b58f5452e7e2ed77
-
SHA1
a509af3ad4613a3a8fa7d7ffe45c0a160e97a4bb
-
SHA256
214c945b81cc7b6841bf9e74d87043c2ba29c9d52f4c6244690fc0d16c5cc014
-
SHA512
33dfa8a71168c0290230e771e1f70b1bb0a54a942484b7cc01aa6f62719c52e26a217bcca050896a091e5e11c2cb9c0badd1917f8de2eba3bbf8b5a4f7d73850
-
SSDEEP
3072:Uqh9Gpeu/Ij22B0kBOgDyEd/FWaCjwPL5zTev7s/tnSXUdTAwO+xgkdLY56lHdn2:39H2fk0gZqaCILgwVSnugk1HBv0X
Malware Config
Signatures
Files
-
214c945b81cc7b6841bf9e74d87043c2ba29c9d52f4c6244690fc0d16c5cc014.exe windows x86
f92031abfb5a4e5af7c834bf34886e40
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoMarshalHresult
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
winmm
timeGetTime
timeSetEvent
kernel32
LoadResource
GetModuleFileNameA
LoadLibraryA
QueryMemoryResourceNotification
InterlockedDecrement
lstrcpyA
GetCurrentThreadId
lstrcpynA
GetCurrentProcess
LeaveCriticalSection
lstrcatA
GetFileAttributesA
IsDBCSLeadByte
CreateThread
FindResourceA
EnumResourceTypesW
EnterCriticalSection
GetModuleHandleA
GetCurrentThread
WaitForSingleObject
InterlockedIncrement
GetPrivateProfileStringA
TerminateThread
FormatMessageA
SizeofResource
SetEvent
LocalFree
GetComputerNameA
CreateEventA
HeapAlloc
oleacc
CreateStdAccessibleObject
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ