Static task
static1
Behavioral task
behavioral1
Sample
90035ebffa82aad9b7e19301ac26b0e40092ee80ff2a7c89ea17896da4a908ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90035ebffa82aad9b7e19301ac26b0e40092ee80ff2a7c89ea17896da4a908ae.exe
Resource
win10v2004-20220812-en
General
-
Target
90035ebffa82aad9b7e19301ac26b0e40092ee80ff2a7c89ea17896da4a908ae
-
Size
252KB
-
MD5
9cbb5a0818b42e8f26d4e3045a182984
-
SHA1
f3cd1e72b57285b120adfba6a638b09480a261f8
-
SHA256
90035ebffa82aad9b7e19301ac26b0e40092ee80ff2a7c89ea17896da4a908ae
-
SHA512
9c185a2af33b0757012cccb54a8f84c3f634988b13f44b9f60970bd34b869c60599a9adb2c93d29fa5fc0877dfee4da48e9260f5d55ccb3e88f1d9e0de2acd06
-
SSDEEP
3072:mksTstMSPMC78R3dZuKoaxLS9i0WmMPRAeUDGCKm++slgTcC6T/:mksTIEC78R3dzLSs0We4tF
Malware Config
Signatures
Files
-
90035ebffa82aad9b7e19301ac26b0e40092ee80ff2a7c89ea17896da4a908ae.exe windows x86
7bc253afb34ca616de87c9d94a63ad4b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
HeapFree
HeapAlloc
GetProcessHeap
MapViewOfFile
CloseHandle
CreateFileMappingA
GetFileSize
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
LCMapStringW
LCMapStringA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetLastError
SetConsoleCtrlHandler
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetFilePointer
SetStdHandle
shlwapi
PathFileExistsA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ