Static task
static1
Behavioral task
behavioral1
Sample
a15690bdbf4b3cd6e790d13b39d276b65202b84fa7ccabed228fd1939bf31d28.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a15690bdbf4b3cd6e790d13b39d276b65202b84fa7ccabed228fd1939bf31d28.exe
Resource
win10v2004-20220812-en
General
-
Target
a15690bdbf4b3cd6e790d13b39d276b65202b84fa7ccabed228fd1939bf31d28
-
Size
787KB
-
MD5
10e3fd057b56a04e330c6fd0b5123bb0
-
SHA1
19d5cf5df4f6c3b02184bd9ce82dae7a20d59bc0
-
SHA256
a15690bdbf4b3cd6e790d13b39d276b65202b84fa7ccabed228fd1939bf31d28
-
SHA512
abacf0350398916cf4051424da50c7973364bd15cda8592f1d095e243ca7f41d359978b128fc7749f9f05488f3a9d6d548658fba0382dc835f08d5c5019c6c31
-
SSDEEP
3072:OburR5+RcpOpZNPVRRbpeIZLifPO0lCe4tg:TFpOdPFpo5R
Malware Config
Signatures
Files
-
a15690bdbf4b3cd6e790d13b39d276b65202b84fa7ccabed228fd1939bf31d28.exe windows x86
b1e22907145e5028240ee9b5d6af09ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SystemFunction034
kernel32
CloseHandle
CreateFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetLocaleInfoA
GetSystemTimeAsFileTime
GetTickCount
InterlockedCompareExchange
InterlockedExchange
LocalAlloc
LocalFree
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
lstrlenW
VirtualAlloc
InterlockedDecrement
GetCPInfo
GetLastError
HeapFree
GetProcAddress
GetModuleHandleA
ExitProcess
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThread
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
RtlUnwind
HeapSize
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
ole32
HACCEL_UserUnmarshal
oleaut32
SafeArrayCopy
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 464KB - Virtual size: 472KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE