Static task
static1
Behavioral task
behavioral1
Sample
332879349e69be06c526d140e1555b9734c2311775eb85df946454633fa0d8b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
332879349e69be06c526d140e1555b9734c2311775eb85df946454633fa0d8b1.exe
Resource
win10v2004-20220812-en
General
-
Target
332879349e69be06c526d140e1555b9734c2311775eb85df946454633fa0d8b1
-
Size
5.1MB
-
MD5
84b6a48c1a00f860322a6ee0e29a18ca
-
SHA1
0d34f5068cd8e9a6c2cf9e5e1c9cabefdf273a16
-
SHA256
332879349e69be06c526d140e1555b9734c2311775eb85df946454633fa0d8b1
-
SHA512
9f928cd8c1277b9b015d4a6a3fe8b80522fac0c011584c5afc5a280cf1ca02237493349f0d2d77c8f42bcbe587f9365bea953b07215e7ad4fe6f157fd6c16c19
-
SSDEEP
98304:evc4cXLxX/uOT/ZVJKkpfVyUkv+Oq2XgLR1OYR+9Hwn5sAE+FXLxX/uOT/ZVJ:evtcXLxX/uCxKkpfgOSXUOYgaZFXLxXZ
Malware Config
Signatures
Files
-
332879349e69be06c526d140e1555b9734c2311775eb85df946454633fa0d8b1.exe windows x86
6b431ab527c812f863c870311746c734
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetLocalTime
SetFilePointer
SystemTimeToFileTime
FileTimeToLocalFileTime
GetCurrentThreadId
OutputDebugStringW
ReadFile
GetFileSizeEx
HeapAlloc
GetProcessHeap
HeapFree
SetLastError
FindNextFileW
FindFirstFileW
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetFileSize
FlushFileBuffers
WriteFile
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
CreateFileW
DeviceIoControl
GetModuleHandleW
GetProcAddress
GetCurrentProcessId
GetCurrentProcess
GetTickCount
CloseHandle
TerminateProcess
Sleep
GetModuleFileNameW
DeleteFileW
WaitForSingleObject
CreateDirectoryW
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindResourceExW
GetLocaleInfoA
GetCurrentDirectoryA
GetFullPathNameA
QueryPerformanceCounter
GetStringTypeA
FindClose
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
HeapCreate
VirtualAlloc
VirtualFree
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
FindFirstFileA
GetDriveTypeA
FileTimeToSystemTime
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsFree
FindResourceW
LoadResource
LockResource
LoadLibraryA
SizeofResource
TlsAlloc
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
TlsSetValue
TlsGetValue
CreateMutexW
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
RaiseException
HeapDestroy
HeapReAlloc
HeapSize
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
SetFilePointerEx
CreateFileA
advapi32
RegQueryValueExA
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shlwapi
PathIsDirectoryW
PathFileExistsW
SHGetValueW
PathCombineW
ws2_32
WSAGetLastError
WSASetLastError
__WSAFDIsSet
select
gethostname
closesocket
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ