Static task
static1
Behavioral task
behavioral1
Sample
c40f9574bccaee7163ba70bd3f87494ca9a7b5ce2e5a53a8d7da58183fe72eb0.exe
Resource
win7-20220812-en
General
-
Target
c40f9574bccaee7163ba70bd3f87494ca9a7b5ce2e5a53a8d7da58183fe72eb0
-
Size
252KB
-
MD5
dce4a30eb4bd36c75605cbd48501ec54
-
SHA1
56b64d1960e2ae8899a205f19c45dcfb698b4e00
-
SHA256
c40f9574bccaee7163ba70bd3f87494ca9a7b5ce2e5a53a8d7da58183fe72eb0
-
SHA512
5ef48781b251c9ba92c5fe016d42027729139952c3198ae54beedcd6e0c5a0d4449d940282eef02694a0662516c438df7a4367255472ea6f645af19e02239349
-
SSDEEP
6144:yVXLon9E3tSn8eAAXVY54Nl1OzZIsb62p:Wkn69S8eAA25ufUp
Malware Config
Signatures
Files
-
c40f9574bccaee7163ba70bd3f87494ca9a7b5ce2e5a53a8d7da58183fe72eb0.exe windows x86
7a1614c5606ecf8989eab55281e13f2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
FreeLibrary
CloseHandle
WriteFile
CreateFileA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ