Static task
static1
Behavioral task
behavioral1
Sample
d83ac009521c27f71fcb6d2306c4ac7f613bc4487913c1f1bec7eefdae8e4ae5.exe
Resource
win7-20220812-en
General
-
Target
d83ac009521c27f71fcb6d2306c4ac7f613bc4487913c1f1bec7eefdae8e4ae5
-
Size
555KB
-
MD5
c74e7754a7f1449ac02de2c76b67f039
-
SHA1
af4a5c20665e512db2880f8a0e403a9006120976
-
SHA256
d83ac009521c27f71fcb6d2306c4ac7f613bc4487913c1f1bec7eefdae8e4ae5
-
SHA512
6adc4412a84299288f2de5f25b81de15622adf6fa7072f9b463e2794abe27549f47f76c693c3003d7ee3b18354067d81f87c99e6a67a69b209d0a0f3ba1f1504
-
SSDEEP
12288:6u1fgBPsi5MLCWXQ06fMFhcPGiBUMcUMH:6uYFsiZWX9qMAPGAU5Uw
Malware Config
Signatures
Files
-
d83ac009521c27f71fcb6d2306c4ac7f613bc4487913c1f1bec7eefdae8e4ae5.exe windows x86
049f51a49c030ad54f5792fd0d4fa88e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetTickCount
CreateFileA
ExitProcess
GetSystemDefaultLangID
FileTimeToSystemTime
GetSystemTimeAsFileTime
GetProcAddress
SetStdHandle
GetOEMCP
GetACP
SetFilePointer
DebugBreak
RaiseException
GetVersionExA
LoadLibraryA
GetModuleHandleA
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameA
CloseHandle
GetCurrentProcess
FreeLibrary
RtlUnwind
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
VirtualQuery
InterlockedExchange
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetLastError
SetConsoleCtrlHandler
UnhandledExceptionFilter
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetCommandLineA
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualProtect
GetSystemInfo
GetLocaleInfoA
GetCPInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
user32
MessageBoxA
oleaut32
SysAllocStringByteLen
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE