Static task
static1
Behavioral task
behavioral1
Sample
959a113231a5df8994024efbe604676ddc2474d51f628fc9923d649733544042.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
959a113231a5df8994024efbe604676ddc2474d51f628fc9923d649733544042.exe
Resource
win10v2004-20220901-en
General
-
Target
959a113231a5df8994024efbe604676ddc2474d51f628fc9923d649733544042
-
Size
297KB
-
MD5
4a342200e55aaa14f86a6fe34aa0ecd0
-
SHA1
22a106424041de59845eb1412b369005af3dffdc
-
SHA256
959a113231a5df8994024efbe604676ddc2474d51f628fc9923d649733544042
-
SHA512
6f516f09e8f7ef8dea95ded95d6af2a733c589e22b04473ddb5d47e17de29c3cc207847b840cc4cee82623aa9447a3fcf743cf4558cfe8f80817efd125a94815
-
SSDEEP
3072:RbxkbcmzsI7zhLifNYPa2/RGoat7MBFwHzDxe4HFVhRg/wUfSZFCyXlg:gpAIPS6JGo9BFwHXxe4l/3MSZF1XG
Malware Config
Signatures
Files
-
959a113231a5df8994024efbe604676ddc2474d51f628fc9923d649733544042.exe windows x86
e75e4f2852ba1e7761e92563adbbb947
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleMode
GetConsoleMode
GetStdHandle
GetModuleHandleA
FreeLibrary
GetLastError
LoadLibraryA
SetErrorMode
GetProcAddress
LocalAlloc
LocalFree
InterlockedExchange
RaiseException
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetSystemTimeAsFileTime
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
WriteFile
GetModuleFileNameA
DeleteCriticalSection
FatalAppExitA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
InitializeCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
VirtualAlloc
HeapReAlloc
GetConsoleCP
FlushFileBuffers
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
GetLocaleInfoW
SetFilePointer
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CloseHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE