Static task
static1
Behavioral task
behavioral1
Sample
442e21ce3bdcc72c5449f408ffd246dba83bd9aa04e81e7ac0ea2415cc13a12d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
442e21ce3bdcc72c5449f408ffd246dba83bd9aa04e81e7ac0ea2415cc13a12d.exe
Resource
win10v2004-20220901-en
General
-
Target
442e21ce3bdcc72c5449f408ffd246dba83bd9aa04e81e7ac0ea2415cc13a12d
-
Size
12KB
-
MD5
78296f047716b3a07112ad60d367db4e
-
SHA1
459a015883853d9fce12f27282cfc92d4c4368a5
-
SHA256
442e21ce3bdcc72c5449f408ffd246dba83bd9aa04e81e7ac0ea2415cc13a12d
-
SHA512
547e93b8700ef4c44a1756358b5e338fa312aed3d07a03a21fd25db642a5cf69c8ce50f9abf019aa9b19c200c068cc1e0499eb54636e53de0570753feeb2687a
-
SSDEEP
384:Xkd4KGVXrDoLokwzKSZMuxydOURntxSL61m6:XNFOSZ/xydOs7SL8
Malware Config
Signatures
Files
-
442e21ce3bdcc72c5449f408ffd246dba83bd9aa04e81e7ac0ea2415cc13a12d.exe windows x86
2c36c94ee35e12b1165e15ae428366f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
SetFileAttributesA
MoveFileA
FreeResource
CloseHandle
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
lstrcpyA
lstrlenA
lstrcmpiA
SetLastError
GetFileAttributesA
ReadFile
SetFilePointer
GetModuleFileNameA
SetUnhandledExceptionFilter
Sleep
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
user32
PostThreadMessageA
GetMessageA
wsprintfA
GetInputState
msvcrt
realloc
malloc
strchr
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ