Static task
static1
Behavioral task
behavioral1
Sample
302321a2f48fc3bbae475c13d98937f9604f2f2de1960b58dbee55d7e41c05fd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
302321a2f48fc3bbae475c13d98937f9604f2f2de1960b58dbee55d7e41c05fd.exe
Resource
win10v2004-20220901-en
General
-
Target
302321a2f48fc3bbae475c13d98937f9604f2f2de1960b58dbee55d7e41c05fd
-
Size
745KB
-
MD5
2b291d6589c8fb47dc66d2095e7e5f2d
-
SHA1
5d2f9ac9f0e2dd4abd01d92ce6c75f1c184e3de6
-
SHA256
302321a2f48fc3bbae475c13d98937f9604f2f2de1960b58dbee55d7e41c05fd
-
SHA512
e96d0c593bcf7bafb787aa195172e3db8454b41e03c97332d4f4b31c90093b2abeafe66b943081c3f6454e879d8f2e5937539f8e9cd9a77af11bdf7240964ba2
-
SSDEEP
12288:0FifD/kZOcjPW+FVAT+bA2kTofuGrqGH44Eze4u1dwpRbS+EZZZya/U:0QfD/kZOcj++FVAT+bOTW5qzbze4SwpB
Malware Config
Signatures
Files
-
302321a2f48fc3bbae475c13d98937f9604f2f2de1960b58dbee55d7e41c05fd.exe windows x86
10de2b2de934340b3d75bf03d5986501
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetLastError
GetModuleHandleA
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCPInfo
LockResource
SizeofResource
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindNextFileA
ResetEvent
CompareStringA
FindFirstFileA
UnmapViewOfFile
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetModuleFileNameA
SetEvent
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
GetOEMCP
GetTickCount
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
GetSystemDirectoryA
MulDiv
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
lstrcmpiW
RemoveDirectoryA
GetVersionExA
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
TlsGetValue
FindClose
GetEnvironmentVariableA
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
FreeEnvironmentStringsW
SetErrorMode
lstrcatA
LocalAlloc
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetCurrentProcessId
GetCommandLineA
GetCurrentThread
GetVersionExW
GetCurrentThreadId
user32
GetFocus
SetForegroundWindow
GetDesktopWindow
SendMessageA
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
GetWindowLongA
CheckMenuItem
SetWindowLongA
ReleaseCapture
IsIconic
GetWindowRect
DefWindowProcA
PeekMessageA
SetFocus
DispatchMessageA
SetTimer
GetSubMenu
RegisterClassA
EnableMenuItem
EndDialog
GetWindow
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
UnregisterClassA
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
MoveWindow
InvalidateRect
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
MessageBoxA
LoadStringA
GetSysColor
advapi32
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
msvcrt
_exit
_cexit
Sections
.text Size: 711KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ