Static task
static1
Behavioral task
behavioral1
Sample
142bb49d37cdfb2d24826806e4080dab7bfbe5b8a9d1859a988eb33a3a14c66b.exe
Resource
win7-20221111-en
General
-
Target
142bb49d37cdfb2d24826806e4080dab7bfbe5b8a9d1859a988eb33a3a14c66b
-
Size
368KB
-
MD5
1366c3e8189847c6ded38825e5cb3b0c
-
SHA1
319f45b02ce66d768341cd7a358e7627f6af26e3
-
SHA256
142bb49d37cdfb2d24826806e4080dab7bfbe5b8a9d1859a988eb33a3a14c66b
-
SHA512
76f5a8e27a584dd9fb75e122dd07ff188ef61d92e4a9f55bdcba0e115c86009b5f9b518db32346bd7f932294f2b679941af474e4ba9ab1a5be9ab4b1843c05a0
-
SSDEEP
6144:4BYHWEG3+O81DS+/ChzbzmNUZUiw3oGOLiM5PjQlvfCLv/f5AOog3vyVhVQis2ee:qYHWEG3+O81DbubzcfSvJIgfwLsvy
Malware Config
Signatures
Files
-
142bb49d37cdfb2d24826806e4080dab7bfbe5b8a9d1859a988eb33a3a14c66b.exe windows x86
a47bdc94adcbcb763a31f0a466224b1a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindNextFileA
SetStdHandle
GetLocaleInfoW
GetVersionExA
WideCharToMultiByte
GetLocaleInfoA
MultiByteToWideChar
ExitProcess
RtlUnwind
GetModuleHandleA
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
GetProcAddress
TerminateProcess
GetCurrentProcess
GetCPInfo
HeapReAlloc
LCMapStringA
GetLastError
LCMapStringW
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ReadFile
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
CloseHandle
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetTimeZoneInformation
LoadLibraryA
GetACP
GetOEMCP
SetEnvironmentVariableA
user32
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
SetNamedSecurityInfoA
RegOpenKeyA
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE