Static task
static1
Behavioral task
behavioral1
Sample
0f339fade93f4c55468f211dceb7c7b49f12d8b8c008d6b4b865d3b72d8f24a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f339fade93f4c55468f211dceb7c7b49f12d8b8c008d6b4b865d3b72d8f24a4.exe
Resource
win10v2004-20220812-en
General
-
Target
0f339fade93f4c55468f211dceb7c7b49f12d8b8c008d6b4b865d3b72d8f24a4
-
Size
1.1MB
-
MD5
0c0ddb4659e0fc0675c28fb93d5fc5af
-
SHA1
931c6107ea1ee0e6d4a41fda58eb20dc73fbb2d3
-
SHA256
0f339fade93f4c55468f211dceb7c7b49f12d8b8c008d6b4b865d3b72d8f24a4
-
SHA512
f3c8ede508aa67a3108a059a13a2a6a9e042eb64c920ef0fa5e4c4af8b6af87de1cb55b3c6c5fc152660a0ba98c0c6efad7216b80dd996b134684868df40215a
-
SSDEEP
24576:eHjgTFLQ1Aw3ckvwgQq8AIS/jguDuHpvA1yBdEiC74:cMTF81L3RD7RuJvAqY74
Malware Config
Signatures
Files
-
0f339fade93f4c55468f211dceb7c7b49f12d8b8c008d6b4b865d3b72d8f24a4.exe windows x86
81e118c8e766dc27b93c62d96189d98d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetVolumeInformationA
Sleep
TerminateProcess
ReadFile
GetWindowsDirectoryA
LoadLibraryA
GetModuleFileNameA
CloseHandle
GetTempPathA
GetCurrentProcess
SetFilePointer
CreateDirectoryA
CreateFileA
InitializeCriticalSection
FlushFileBuffers
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLastError
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
GetProcAddress
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapSize
SetStdHandle
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
ws2_32
recv
WSAStartup
closesocket
gethostbyname
send
connect
socket
htons
Sections
.text Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ