Static task
static1
Behavioral task
behavioral1
Sample
2d7b66e5a7169e533d5bc5bafef5392f708aeeece83332b00d7adddc991803a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d7b66e5a7169e533d5bc5bafef5392f708aeeece83332b00d7adddc991803a6.exe
Resource
win10v2004-20220812-en
General
-
Target
2d7b66e5a7169e533d5bc5bafef5392f708aeeece83332b00d7adddc991803a6
-
Size
128KB
-
MD5
0cbe2096365928b315bd2dcd3dc0dc22
-
SHA1
df031f5fea1465673a9875be03680d264727b300
-
SHA256
2d7b66e5a7169e533d5bc5bafef5392f708aeeece83332b00d7adddc991803a6
-
SHA512
2247435782e40f27c0ed40de3a345efabb3bbc68da60e76d1a36c5ddcd6353daa0e5ab0fc01958d447aa9d78f637e1b8fcc3f3b75072b37c798a2bd05ce3a785
-
SSDEEP
3072:aXvIoztQZ0uC8uh+Lote4B2agrjYaCh+yNzjU0:KL2Z0guhxR1z
Malware Config
Signatures
Files
-
2d7b66e5a7169e533d5bc5bafef5392f708aeeece83332b00d7adddc991803a6.exe windows x86
328c58f39fb66139d5150408ff13fda2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetLastError
SleepEx
ReadFileEx
ExitProcess
GetTickCount
GetProcAddress
GetSystemTime
CreateFileA
LocalAlloc
GetModuleFileNameA
SwitchToThread
GetEnvironmentStringsW
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
WriteFile
GetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetClassInfoA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ