Static task
static1
Behavioral task
behavioral1
Sample
1b29e407f0700037a36ad0b2b49af6694fa6a31fffc3e1474f8a7abc0daa848c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1b29e407f0700037a36ad0b2b49af6694fa6a31fffc3e1474f8a7abc0daa848c.exe
Resource
win10v2004-20221111-en
General
-
Target
1b29e407f0700037a36ad0b2b49af6694fa6a31fffc3e1474f8a7abc0daa848c
-
Size
332KB
-
MD5
22446d3f23e57a21cb6689256cc9b400
-
SHA1
0eab4ab4bd72964fc66cd93eb3d210092520f64c
-
SHA256
1b29e407f0700037a36ad0b2b49af6694fa6a31fffc3e1474f8a7abc0daa848c
-
SHA512
68ec752a084f349438e31e024bc74e4c8111eb5816ad965ea7f665a1c53b4db7dbd41b9337988c19c5ee5f816f279c01b608e44e895aefdcfe74f929deb3cce1
-
SSDEEP
6144:5YXSXZt7jd/KXpF2sK2clTql6ZmVK3yAAd:Nbnd/wK/xql8mVdAAd
Malware Config
Signatures
Files
-
1b29e407f0700037a36ad0b2b49af6694fa6a31fffc3e1474f8a7abc0daa848c.exe windows x86
fa4f8ddf93e00741c80db734b40a8588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetLastError
UnmapViewOfFile
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
GetProcessTimes
GetCurrentProcess
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
DeleteFileA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetSystemTime
GetLocalTime
HeapReAlloc
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
CreateDirectoryA
GetFileType
GetStartupInfoA
ReadFile
GetProcAddress
FlushFileBuffers
WriteFile
SetFilePointer
RaiseException
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE