Static task
static1
Behavioral task
behavioral1
Sample
29ade99b2ebfe7c0b12fe725f6f9d59af01ecada3c2cb6f0b16ba3b31ab9d7f6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29ade99b2ebfe7c0b12fe725f6f9d59af01ecada3c2cb6f0b16ba3b31ab9d7f6.exe
Resource
win10v2004-20220812-en
General
-
Target
29ade99b2ebfe7c0b12fe725f6f9d59af01ecada3c2cb6f0b16ba3b31ab9d7f6
-
Size
16.3MB
-
MD5
1865abe2a1798bdafc50cbc3a04b4982
-
SHA1
9aaa75bc31ba9ca305843d18048e271a75273ddd
-
SHA256
29ade99b2ebfe7c0b12fe725f6f9d59af01ecada3c2cb6f0b16ba3b31ab9d7f6
-
SHA512
d6589df192c3f06cba52c288d056c35f48c19edf5f10925354509780a2b1dd4136fe9269f9c65d2942c6ba6fe80e76174604717a1454509c1a878a203a89e283
-
SSDEEP
393216:jvkQGmo9MopsWlGIDSwR8pcBv0eWmcP55UfPjPR1T:jvVGj2ozlH6pc1XWmg54LT
Malware Config
Signatures
Files
-
29ade99b2ebfe7c0b12fe725f6f9d59af01ecada3c2cb6f0b16ba3b31ab9d7f6.exe windows x86
21b2df1e7b12765af238dbf877fe7627
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
CreateMutexA
TerminateThread
WaitForSingleObject
ResumeThread
SuspendThread
lstrcatA
lstrcpyA
CreateThread
DeleteFileA
CreateDirectoryA
lstrlenA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFileSize
CreateFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVersionExA
SetFileAttributesA
lstrcpynA
GetTempPathA
RemoveDirectoryA
FindClose
FindNextFileA
ReleaseMutex
SetLastError
WriteFile
ReadFile
SetFilePointer
GetExitCodeProcess
CreateProcessA
GetStartupInfoA
GetACP
LoadLibraryA
FlushFileBuffers
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
CloseHandle
GetFileAttributesA
GetCommandLineA
FindFirstFileA
Sleep
RtlUnwind
HeapAlloc
HeapFree
SetEndOfFile
GetFileType
GetVersion
ExitProcess
GetCPInfo
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
user32
LoadStringA
SetWindowTextA
MessageBoxA
GetDlgItem
GetSystemMenu
PostMessageA
GetMenuItemCount
EnableMenuItem
EnableWindow
SendMessageA
IsWindowVisible
KillTimer
ShowWindow
EndDialog
SetTimer
DialogBoxParamA
CharNextA
GetMenuItemID
gdi32
DeleteObject
CreateFontA
comctl32
ord17
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ