Static task
static1
Behavioral task
behavioral1
Sample
0d3d198e64d325ca524bbf0750f75251652191a87745746ab8fafad6fa5d37a5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d3d198e64d325ca524bbf0750f75251652191a87745746ab8fafad6fa5d37a5.exe
Resource
win10v2004-20220901-en
General
-
Target
0d3d198e64d325ca524bbf0750f75251652191a87745746ab8fafad6fa5d37a5
-
Size
772KB
-
MD5
81eb9fd2efb5c5e4a729ff4f29bd2ba0
-
SHA1
178796796d7125d1e7f849d41422cd3416713b5f
-
SHA256
0d3d198e64d325ca524bbf0750f75251652191a87745746ab8fafad6fa5d37a5
-
SHA512
64ded8bc6b3ab692c33e77818a343474852f73bfcd3e484f6b36f561172db1e61ad4474cbba033c2925919b0dc98aba455e561e12c931e09c17ade1a26cd4a84
-
SSDEEP
12288:zaK3lvwCH/L2MSDU0sRmy3FvfLnAXUnGeoUOkKndv5Ex6:xlv4JDfomyVjWUGeskKdRd
Malware Config
Signatures
Files
-
0d3d198e64d325ca524bbf0750f75251652191a87745746ab8fafad6fa5d37a5.exe windows x86
0ff435f1ddc39d38be100b4f078f4181
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memcpy
sin
RtlUnwind
kernel32
GetModuleFileNameA
CompareStringW
CompareStringA
InterlockedCompareExchange
GetDiskFreeSpaceW
UnmapViewOfFile
CreateDirectoryW
lstrlenW
HeapAlloc
GetPrivateProfileSectionA
GetSystemDirectoryA
WritePrivateProfileStringA
FindClose
SetUnhandledExceptionFilter
ExitProcess
GetEnvironmentStringsW
GetPrivateProfileStringW
lstrcpyA
SetFilePointer
GetFileSize
GetStdHandle
LoadLibraryA
lstrcatW
WideCharToMultiByte
CreateFileW
GetModuleFileNameW
LCMapStringW
lstrcpynW
GetLastError
GetFileType
MultiByteToWideChar
SetHandleCount
FlushFileBuffers
GetTempPathA
CloseHandle
SetStdHandle
GetWindowsDirectoryW
GetShortPathNameA
MapViewOfFile
LCMapStringA
lstrcmpiW
IsBadReadPtr
AddVectoredExceptionHandler
GetCurrentProcess
EnterCriticalSection
CreateWaitableTimerW
GetCurrentThread
RemoveVectoredExceptionHandler
CreateFileA
GetCommandLineA
GetVersionExA
GetStartupInfoA
LeaveCriticalSection
OutputDebugStringA
GetProcAddress
GetModuleHandleA
WriteFile
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryExA
InitializeCriticalSection
Sleep
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualProtect
GetSystemInfo
VirtualQuery
GetLocaleInfoW
GetTimeZoneInformation
Sections
.text Size: 704KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE