Static task
static1
Behavioral task
behavioral1
Sample
2f6802566728e2e41a3f5c670a54fa93557fe0107e0c0c031fce63f02b5ae5f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f6802566728e2e41a3f5c670a54fa93557fe0107e0c0c031fce63f02b5ae5f3.exe
Resource
win10v2004-20220901-en
General
-
Target
2f6802566728e2e41a3f5c670a54fa93557fe0107e0c0c031fce63f02b5ae5f3
-
Size
209KB
-
MD5
831c0ca6708a8491801efb1d0a7826f1
-
SHA1
f176ec65c06534b9ba8ce08fefa9f8538a71321e
-
SHA256
2f6802566728e2e41a3f5c670a54fa93557fe0107e0c0c031fce63f02b5ae5f3
-
SHA512
cabea2f57c5646c4be2d94bf87903d50a37a15b30654f22f4c6de8e974d2def1bbac44e1e4139bfee08be3ef7ece66b6336ea286ceff142871059b35e255fcb3
-
SSDEEP
3072:403ElzP1MHO7EId1FhcbZNq4t6mZTKGgZOjYtzEnazOJEHR1pczXKwt:47PfYId1HcdAmpKGgZPtzbyJEHR1ibt
Malware Config
Signatures
Files
-
2f6802566728e2e41a3f5c670a54fa93557fe0107e0c0c031fce63f02b5ae5f3.exe windows x86
1f9c267442b0ae0d083ccc753b4f88b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
GetLastError
GetModuleFileNameA
lstrcpyA
SetErrorMode
lstrlenA
GetSystemDirectoryA
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WriteFile
ReadFile
SetFilePointer
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE