Static task
static1
Behavioral task
behavioral1
Sample
04490b02fbef7f36a22f91b51a0c2f5067e1c518a03b948178a8fdaa078aaeaa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04490b02fbef7f36a22f91b51a0c2f5067e1c518a03b948178a8fdaa078aaeaa.exe
Resource
win10v2004-20220812-en
General
-
Target
04490b02fbef7f36a22f91b51a0c2f5067e1c518a03b948178a8fdaa078aaeaa
-
Size
153KB
-
MD5
0babb837220e21200c1d751f192ba19c
-
SHA1
a113685db33c6de1480e509aca4b06fdfef3ff78
-
SHA256
04490b02fbef7f36a22f91b51a0c2f5067e1c518a03b948178a8fdaa078aaeaa
-
SHA512
2dfd7ab303a56eac99601882ca7f1ab093221242e0bc657172b46b17ac2b1937b8924c9ed34fb96f84b5de0df7197863be26146f61971da94b6ffa7a907144ca
-
SSDEEP
3072:JnTU0pXTFVqokj3kcIdxJsuhCQk6dlZtmXG/3F4VhKaLPndHZ:5TXH2j3kfxsQjbrmXG/VkLnd
Malware Config
Signatures
Files
-
04490b02fbef7f36a22f91b51a0c2f5067e1c518a03b948178a8fdaa078aaeaa.exe windows x86
6d59d1eb5eb63d04e04c3a8fbbb25f61
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetSystemTimeAsFileTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleHandleW
CloseHandle
HeapAlloc
GetCommandLineW
HeapCreate
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetModuleHandleA
GetVersion
GetProcAddress
GetEnvironmentStringsW
GetLocaleInfoA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
VirtualFree
HeapFree
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
user32
UpdateWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
PostQuitMessage
MessageBoxA
GetClientRect
DefWindowProcA
EndPaint
GetSystemMetrics
CreateWindowExA
ShowWindow
gdi32
TextOutA
ole32
CoTaskMemAlloc
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE