Static task
static1
Behavioral task
behavioral1
Sample
12c3e3532f8255d291e53676eb3bb4abb70c054302c4d39389f008339b922eee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12c3e3532f8255d291e53676eb3bb4abb70c054302c4d39389f008339b922eee.exe
Resource
win10v2004-20220812-en
General
-
Target
12c3e3532f8255d291e53676eb3bb4abb70c054302c4d39389f008339b922eee
-
Size
152KB
-
MD5
8193ebda99d2138b4ce70c3c4944c330
-
SHA1
bfdb2a08c6eec7ed595d00de0584681b38db9448
-
SHA256
12c3e3532f8255d291e53676eb3bb4abb70c054302c4d39389f008339b922eee
-
SHA512
adfa3e646d0d3583d6cbc39f1c7e71e0ec7510d970bda5c3d7539b46329aead58b4667935754f8a83fd5753d57bf14e4a814171412455936109916f97ea29b02
-
SSDEEP
768:uI++xIc+2KjwjTs/hwo8Ry1IA88Gh0o2fWGCZQGOAVK2FNuFHupTYfxkXls4U:Y1c+QjBo8RGLCaX2+FdK24U
Malware Config
Signatures
Files
-
12c3e3532f8255d291e53676eb3bb4abb70c054302c4d39389f008339b922eee.exe windows x86
a824301cacb0024ec5a480b1ffbd626c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
OpenEventA
CloseHandle
Sleep
VirtualAlloc
OpenMutexW
ReadFile
GetTickCount
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetProcAddress
GetLastError
RemoveDirectoryA
FindClose
GetModuleHandleW
PulseEvent
TerminateThread
FlushFileBuffers
GetStringTypeW
SuspendThread
InterlockedExchange
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
SetFilePointer
SetStdHandle
MultiByteToWideChar
LCMapStringA
user32
LoadBitmapW
ShowWindow
EnableWindow
LoadCursorA
gdi32
CreatePen
SelectObject
CreateBitmap
advapi32
CryptAcquireContextW
OpenServiceW
winmm
auxSetVolume
avifil32
AVIFileAddRef
winscard
SCardForgetReaderW
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ