Static task
static1
Behavioral task
behavioral1
Sample
e4992571433ac8f8e91431834c8a3b25fe5ac13c38bf36c0323c184389d70aee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e4992571433ac8f8e91431834c8a3b25fe5ac13c38bf36c0323c184389d70aee.exe
Resource
win10v2004-20220901-en
General
-
Target
e4992571433ac8f8e91431834c8a3b25fe5ac13c38bf36c0323c184389d70aee
-
Size
220KB
-
MD5
83fbcd3f48a5cf395df0eb041b768700
-
SHA1
bf14953ebc319c696984175c6e706e63ad3af39e
-
SHA256
e4992571433ac8f8e91431834c8a3b25fe5ac13c38bf36c0323c184389d70aee
-
SHA512
371696561f82385cf8eb35713be2fe8a6b639758bcc72c421f585e340669f7ddfb97520eef193f2a98e8e2bbb959cdad695f86ac99a67ae9e043abdfa3e80477
-
SSDEEP
3072:8wxQeImDHfPDnYtqFjPeDxrOrwcrH7xG0UwlWl6hGn/7ecWST3LBzS/9WsUp4ma:8KnImLzeDxW1bkNwMXnz2STBS/47xa
Malware Config
Signatures
Files
-
e4992571433ac8f8e91431834c8a3b25fe5ac13c38bf36c0323c184389d70aee.exe windows x86
59181390ccacef2a2fd56d90e429abaf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
MapViewOfFileEx
GetProcessHeap
HeapAlloc
GetModuleHandleA
HeapCreate
GetCommandLineA
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
HeapFree
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ