Static task
static1
Behavioral task
behavioral1
Sample
f38d1a59e1d35cfab85e16036f31206e2b18d425c266d5d3e7ceab6dace00108.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f38d1a59e1d35cfab85e16036f31206e2b18d425c266d5d3e7ceab6dace00108.exe
Resource
win10v2004-20220901-en
General
-
Target
f38d1a59e1d35cfab85e16036f31206e2b18d425c266d5d3e7ceab6dace00108
-
Size
992KB
-
MD5
4d4ae2de8361268c5bc92148726ceccc
-
SHA1
062ad62ebe50bcec3940d7cb087d7a511c662b0c
-
SHA256
f38d1a59e1d35cfab85e16036f31206e2b18d425c266d5d3e7ceab6dace00108
-
SHA512
53aa97f7e6dd5ca13d38fdd3228b870c21010ea25b71445266fa009c53b66dba7cf642db80ace8711e0214ff5c18a36fb4ed05129aa223bee9f7adc22277590c
-
SSDEEP
24576:lTTTTTTTTTTTTTTTTTTTTTWJtmkEOli1ETTTT:IJm1
Malware Config
Signatures
Files
-
f38d1a59e1d35cfab85e16036f31206e2b18d425c266d5d3e7ceab6dace00108.exe windows x86
3863db5a761c89bd303ba9a442e96af1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
SetLastError
LocalAlloc
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
VirtualFree
WaitForSingleObject
HeapCreate
WriteConsoleA
QueryPerformanceCounter
TerminateProcess
LocalFree
GetOEMCP
DuplicateHandle
ReadFile
GetStartupInfoA
InterlockedExchange
FindNextFileW
GetModuleHandleA
GetStringTypeA
CompareStringA
RaiseException
TlsFree
GetProcAddress
TlsGetValue
UnhandledExceptionFilter
WideCharToMultiByte
GetFileSize
GetLocaleInfoA
SizeofResource
GetCurrentProcess
DeleteCriticalSection
GetCPInfo
LoadLibraryA
GetModuleFileNameA
GlobalUnlock
GetEnvironmentStringsW
GetVersionExA
HeapAlloc
HeapDestroy
LCMapStringA
FreeLibrary
GetConsoleCP
CreateMutexA
GetModuleFileNameW
lstrlenA
SetHandleCount
LCMapStringW
HeapFree
GetProcessHeap
GetCommandLineA
user32
MessageBoxA
TranslateMessage
ReleaseDC
DialogBoxParamA
GetDC
SendMessageA
DispatchMessageA
ShowWindow
GetClientRect
LoadCursorA
EnableMenuItem
SetTimer
msvcrt
??2@YAPAXI@Z
_onexit
__dllonexit
??3@YAXPAX@Z
strlen
msvcp60
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 948KB - Virtual size: 947KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE