Static task
static1
Behavioral task
behavioral1
Sample
945d3084df391107e50aed16ea1b242e01093566877a1af475680f493a65131d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
945d3084df391107e50aed16ea1b242e01093566877a1af475680f493a65131d.exe
Resource
win10v2004-20220812-en
General
-
Target
945d3084df391107e50aed16ea1b242e01093566877a1af475680f493a65131d
-
Size
572KB
-
MD5
e0f6b9f6ee12756be01ba8727c4caa6c
-
SHA1
8f20b78cb7d682b7d5f511065feb9bda23731c1c
-
SHA256
945d3084df391107e50aed16ea1b242e01093566877a1af475680f493a65131d
-
SHA512
2b2e3a36ce1b506cbab96af353a787d814dc0dbae07f27e9e6507e8fdea83f0ed6b14ce39b5561599d62f0f0c1693bde2288c25fd4889ae6c4b9ef95f52858b1
-
SSDEEP
12288:rJiiArznUjCWjHp/fckXKx0NDkC2rb3srKa/R+:rUznUjCWjJG6DnyyKa/R+
Malware Config
Signatures
Files
-
945d3084df391107e50aed16ea1b242e01093566877a1af475680f493a65131d.exe windows x86
0028a666ed86ef5b03655f13040b1b45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
GetCommandLineW
SetCurrentDirectoryW
OutputDebugStringA
OutputDebugStringW
DecodePointer
RaiseException
GetLastError
SetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
FindResourceExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
LoadResource
LockResource
SizeofResource
GetConsoleCP
LoadLibraryA
LoadLibraryW
FindResourceW
SetDllDirectoryW
WideCharToMultiByte
FreeLibrary
IsDebuggerPresent
GetCurrentThread
VirtualProtect
GetCurrentProcessId
MultiByteToWideChar
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
SetEndOfFile
CreateFileW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FindFirstFileExW
GetConsoleMode
ReadFile
LocalFree
FindClose
GetTimeZoneInformation
SetFilePointerEx
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
GetTimeFormatW
GetSystemTimeAsFileTime
EncodePointer
LCMapStringEx
GetLocaleInfoEx
CompareStringEx
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetACP
SetEnvironmentVariableA
SetEnvironmentVariableW
GetFileType
GetDateFormatW
ReadConsoleW
user32
wsprintfW
PostThreadMessageW
MessageBoxW
GetDesktopWindow
SetWindowsHookExW
CallNextHookEx
ole32
CoUninitialize
CoReleaseServerProcess
CoAddRefServerProcess
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
SysStringByteLen
SysAllocStringByteLen
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathFindFileNameW
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ