Static task
static1
Behavioral task
behavioral1
Sample
af144c4d9cd50b7a64c027db9cf71b6d22ea37b2fa159feca389966ca97ad73a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af144c4d9cd50b7a64c027db9cf71b6d22ea37b2fa159feca389966ca97ad73a.exe
Resource
win10v2004-20220901-en
General
-
Target
af144c4d9cd50b7a64c027db9cf71b6d22ea37b2fa159feca389966ca97ad73a
-
Size
285KB
-
MD5
781dd47d473f39c271e25e889af7c430
-
SHA1
da3931b1d66f22d4ea9d87984fecae8c737bec80
-
SHA256
af144c4d9cd50b7a64c027db9cf71b6d22ea37b2fa159feca389966ca97ad73a
-
SHA512
b340a69d5c44da6c023955f2a48cc7372077373953687c8881cf947778e59632a3efd17c22380176800a4907cb288133f8dd89246be480602ae1e8cd5ffd0164
-
SSDEEP
6144:N4NsET41DkEvEPoZrGc0r5KKE+6Oxij7krYz/TbjdvGKL9zSYkEEZ:4syAkFPoh0NhE6gvkUrTVGOzGl
Malware Config
Signatures
Files
-
af144c4d9cd50b7a64c027db9cf71b6d22ea37b2fa159feca389966ca97ad73a.exe windows x86
ec410d72ab98938b9f8783b491eebbf0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
w32topl
ToplSTHeapInit
ToplScheduleCreate
ToplSTHeapDestroy
ToplScheduleCacheCreate
ToplScheduleDuration
ToplScheduleCacheDestroy
ToplScheduleExportReadonly
ToplSTHeapExtractMin
fmifs
ComputeFmMediaType
DiskCopy
FormatEx
EnableVolumeCompression
Chkdsk
Format
Extend
kernel32
lstrcpyW
HeapFree
HeapAlloc
SystemTimeToFileTime
lstrcmpA
WideCharToMultiByte
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
QueryPerformanceCounter
CloseHandle
GetLocalTime
GetProcessHeap
FindResourceW
GetLocaleInfoW
GetCurrentProcess
CreateFileA
GetCurrentProcessId
GetTickCount
GetOEMCP
LoadLibraryA
MultiByteToWideChar
Sections
.text Size: 275KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.nodata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ