Static task
static1
Behavioral task
behavioral1
Sample
afd3cf5af2625dca8e0e1d516d58fe0ac941a725d88ae54a29052aed0195fb7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afd3cf5af2625dca8e0e1d516d58fe0ac941a725d88ae54a29052aed0195fb7b.exe
Resource
win10v2004-20220812-en
General
-
Target
afd3cf5af2625dca8e0e1d516d58fe0ac941a725d88ae54a29052aed0195fb7b
-
Size
711KB
-
MD5
d395350a27061c17bd074195e1cfdd45
-
SHA1
e451bda29ed586c6016d887f226bfffb7478fbec
-
SHA256
afd3cf5af2625dca8e0e1d516d58fe0ac941a725d88ae54a29052aed0195fb7b
-
SHA512
20cf38060aa7320d6537e48452333a92b78f53575e5475b911b9a903e9dd3abe48a69f9d140b850d268301d0295e6e802c9b02850a7bd81ce01a4f5009f7b5ee
-
SSDEEP
12288:cfESc0I0Z6QlIfz9fvECoGi0k95jpZwdKI72T3vxMO7a3ictZLwn8gMKeuSF:eN4QlIfz2Jg05jpadKI72T/x17kiQh1b
Malware Config
Signatures
Files
-
afd3cf5af2625dca8e0e1d516d58fe0ac941a725d88ae54a29052aed0195fb7b.exe windows x86
c8cd5cf6c241da831ec28df149fb8d32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetCurrentProcessId
GetTickCount
GetLastError
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
ExitProcess
VirtualAlloc
LeaveCriticalSection
WriteConsoleW
InterlockedIncrement
CreateFileA
Sleep
CreateEventA
LoadResource
IsValidCodePage
CreateThread
FindNextFileA
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
InterlockedExchange
ReadFile
GetStringTypeA
WideCharToMultiByte
RaiseException
GetProcessHeap
GetProcAddress
GetStartupInfoW
MultiByteToWideChar
GetWindowsDirectoryA
DeleteFileA
lstrcatA
FileTimeToLocalFileTime
GetCurrentProcess
GetModuleFileNameA
lstrcmpiW
FlushFileBuffers
GetVersionExA
TlsAlloc
GetThreadLocale
FreeLibrary
GetConsoleCP
GetFileAttributesA
GetSystemInfo
LCMapStringW
user32
SendMessageA
EnableMenuItem
SetCursor
GetWindowLongA
DrawTextA
GetDC
PeekMessageA
EnableWindow
GetWindowRect
GetSystemMetrics
Sections
.text Size: 684KB - Virtual size: 1006KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ