Static task
static1
Behavioral task
behavioral1
Sample
e43909940d8d64130322dc1f6f714dab8a37244d6bf019bdce188d8195947e64.exe
Resource
win7-20220812-en
General
-
Target
e43909940d8d64130322dc1f6f714dab8a37244d6bf019bdce188d8195947e64
-
Size
212KB
-
MD5
8338710e3ed03f3c287d068f852a36ef
-
SHA1
838d3db1b99e6bb7c4aaef664f3e72e02d7b8035
-
SHA256
e43909940d8d64130322dc1f6f714dab8a37244d6bf019bdce188d8195947e64
-
SHA512
0471306009f3dff2adfc9f693d256f4e82e0e58a29ce68416cc614fbb488bb4a5f9505ef2934fa4d37df4508b27e627ed0bf617dcd9d3702441fc0f3c7bce3c4
-
SSDEEP
3072:JPvDJEHl1YGqGZ+vWJYHGFwuSUtatn1vneUZ9s:JFm5wvg9SIa7fD
Malware Config
Signatures
Files
-
e43909940d8d64130322dc1f6f714dab8a37244d6bf019bdce188d8195947e64.exe windows x86
872b04baee3d6f09b28e8d20f767782c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
GetCommandLineA
RtlUnwind
RaiseException
ExitProcess
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE