Static task
static1
Behavioral task
behavioral1
Sample
96b8d974a7aaa355bd225d374362127c4d07f5ad6908e69cf023758ff9aff7aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96b8d974a7aaa355bd225d374362127c4d07f5ad6908e69cf023758ff9aff7aa.exe
Resource
win10v2004-20220812-en
General
-
Target
96b8d974a7aaa355bd225d374362127c4d07f5ad6908e69cf023758ff9aff7aa
-
Size
236KB
-
MD5
50467bbe60849c452e4d2f5278205740
-
SHA1
52b259bebd5185003f6f784bac937129594cd5ea
-
SHA256
96b8d974a7aaa355bd225d374362127c4d07f5ad6908e69cf023758ff9aff7aa
-
SHA512
614776c37248e4ee960657a71bf2f2b1b49e6445c884e425a3300873fe6a7af14ac17eee8cd573dfff05e73e61c1e8aad407a1ba39a0cc3f6dbcc0f362cf7ec3
-
SSDEEP
6144:YCxUSknxDYgiSWK3JLkaz2yxTUkmaaqFpP0N:Py7xD3/x3Fkaz2yT9nf4
Malware Config
Signatures
Files
-
96b8d974a7aaa355bd225d374362127c4d07f5ad6908e69cf023758ff9aff7aa.exe windows x86
b52cf2c743bfb71fa69c16695a772737
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
lstrcmpiA
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
UnmapViewOfFile
VirtualAlloc
CloseHandle
MapViewOfFileEx
CreateFileMappingA
OpenFileMappingA
LeaveCriticalSection
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcatA
lstrcpyA
FreeLibrary
TerminateThread
WaitForSingleObject
GetFileAttributesExA
ExpandEnvironmentStringsA
GetTickCount
lstrcpynA
DeleteCriticalSection
SearchPathA
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
Sleep
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
ExitThread
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
MultiByteToWideChar
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
FlushFileBuffers
HeapAlloc
HeapSize
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateFileA
WriteConsoleA
GetConsoleOutputCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
user32
GetParent
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
CoInitialize
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE