Static task
static1
Behavioral task
behavioral1
Sample
14447d7c99596e466970ab4a17b84f29db3c37f8475b3a3c53f4d5ea61ef243d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14447d7c99596e466970ab4a17b84f29db3c37f8475b3a3c53f4d5ea61ef243d.exe
Resource
win10v2004-20220812-en
General
-
Target
14447d7c99596e466970ab4a17b84f29db3c37f8475b3a3c53f4d5ea61ef243d
-
Size
191KB
-
MD5
a2e8c1109cdd70dee5541b71c11eac3f
-
SHA1
665588ccd65246ae3353c799240db59dd38c0c2c
-
SHA256
14447d7c99596e466970ab4a17b84f29db3c37f8475b3a3c53f4d5ea61ef243d
-
SHA512
d94955bd5e6b15fb66ac7a1ca1615601de7ec37e245d3534c375dd68668f2a041b6c2c503afcd9763da80db52c7b44ca23bbdd5b2f393dc7515500665eca5a13
-
SSDEEP
3072:bLxezn8SvIg/UCMbELKiAxGWZZ+nawJphjwsGNqZ06eY/k:vxezn1H52GAErikZ0Sk
Malware Config
Signatures
Files
-
14447d7c99596e466970ab4a17b84f29db3c37f8475b3a3c53f4d5ea61ef243d.exe windows x86
51219411d4f10d3562faff479919df7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
CreateStdAccessibleObject
ole32
CoMarshalHresult
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
kernel32
lstrcatA
QueryMemoryResourceNotification
lstrcpynA
CreateEventA
WaitForSingleObject
IsDBCSLeadByte
GetCurrentThreadId
InterlockedIncrement
LoadLibraryA
FormatMessageA
FindResourceA
lstrcpyA
LoadResource
LocalFree
GetModuleHandleA
LeaveCriticalSection
EnumResourceTypesW
CreateThread
EnterCriticalSection
InterlockedDecrement
GetCurrentProcess
GetPrivateProfileStringA
TerminateThread
GetFileAttributesA
GetCurrentThread
SetEvent
SizeofResource
GetModuleFileNameA
GetComputerNameA
HeapAlloc
winmm
timeGetTime
timeSetEvent
Sections
.text Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ