Static task
static1
Behavioral task
behavioral1
Sample
279cb495c3f173457b3fca3236ebf6d630e8855d2465c24e217d732ce69253b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
279cb495c3f173457b3fca3236ebf6d630e8855d2465c24e217d732ce69253b1.exe
Resource
win10v2004-20220812-en
General
-
Target
279cb495c3f173457b3fca3236ebf6d630e8855d2465c24e217d732ce69253b1
-
Size
224KB
-
MD5
a28375dbc4185c8ef8c27e7c20f291ce
-
SHA1
30cfd21a75505d0fa4be7e97e9a317aa01910f0a
-
SHA256
279cb495c3f173457b3fca3236ebf6d630e8855d2465c24e217d732ce69253b1
-
SHA512
3083db5b9e0d5f194765a301a06709940c4afd3c8e29d9c41270e3d5a98241056b8edc1a34a5addd4afe18e72a543caa818374117eaa58db9039f3fb131bcc1c
-
SSDEEP
6144:I0lmSorApFcSrGyAInflK2uXQHjlSvUhpiJ:I0Xouc4JAInsrXYhkUhp0
Malware Config
Signatures
Files
-
279cb495c3f173457b3fca3236ebf6d630e8855d2465c24e217d732ce69253b1.exe windows x86
ad46c19993067bdc52e09f3c57f82fc8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
HeapSize
RtlUnwind
HeapReAlloc
lstrlenA
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetProcAddress
ole32
CoRegisterMallocSpy
StringFromGUID2
CLSIDFromString
comdlg32
GetOpenFileNameA
shlwapi
StrStrA
shell32
ShellExecuteExW
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ