Static task
static1
Behavioral task
behavioral1
Sample
674f94e23135b8b052a3406eb33a2c114fe82a9174b3e43d6e6a6244f0dc4c3b.exe
Resource
win7-20221111-en
General
-
Target
674f94e23135b8b052a3406eb33a2c114fe82a9174b3e43d6e6a6244f0dc4c3b
-
Size
176KB
-
MD5
2325cc130971453a17b7b981788b8ea0
-
SHA1
978844e0c22e2e2b7446d1806398f77392fb6a0d
-
SHA256
674f94e23135b8b052a3406eb33a2c114fe82a9174b3e43d6e6a6244f0dc4c3b
-
SHA512
3b65696b2d3099bb0e313dd4bcebb6e521d61efcbe8de1c5df61b240d49f781b3948b6d6753a10caf77de16b2255f83fb9184bf5cf7015b5276214e5f248088d
-
SSDEEP
3072:vOHB/HW3/btYrLXeEkOmQp5NzvPsFKRzCL5S/FLtOplEDQqcV:xDt1pOmQpLvPsFYCL54BXcV
Malware Config
Signatures
Files
-
674f94e23135b8b052a3406eb33a2c114fe82a9174b3e43d6e6a6244f0dc4c3b.exe windows x86
5c3aaf929f07b9e40f6e6ba64b80c57d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
Sleep
WideCharToMultiByte
LocalFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
lstrlenA
user32
LoadAcceleratorsA
LoadStringA
DefWindowProcA
PostQuitMessage
DestroyWindow
EndPaint
BeginPaint
ShowWindow
UpdateWindow
PostMessageA
SendMessageA
CreateWindowExA
GetClientRect
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
gdi32
GetStockObject
ole32
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
SysAllocString
GetActiveObject
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
msvcr80
_lock
_CIsin
_CIcos
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
atoi
atof
??3@YAXPAX@Z
??2@YAPAXI@Z
atol
sprintf
free
malloc
__CxxFrameHandler3
_CxxThrowException
memset
_unlock
_encode_pointer
__dllonexit
_CIpow
_onexit
_decode_pointer
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE