Static task
static1
Behavioral task
behavioral1
Sample
135415d4c5d73fa1284ddd3a8c799301fc0ee79a2fc925f7961de5b8d48c88d4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
135415d4c5d73fa1284ddd3a8c799301fc0ee79a2fc925f7961de5b8d48c88d4.exe
Resource
win10v2004-20221111-en
General
-
Target
135415d4c5d73fa1284ddd3a8c799301fc0ee79a2fc925f7961de5b8d48c88d4
-
Size
385KB
-
MD5
09a445230f83c981a7820b4232ac2317
-
SHA1
267052c6ef88f55e878ba238a4f83d9d5663e8fd
-
SHA256
135415d4c5d73fa1284ddd3a8c799301fc0ee79a2fc925f7961de5b8d48c88d4
-
SHA512
26db0734004b1624dc464fbec955394022033d1bd67fbd997ba1042cb311fe5413f6c378e8f73c1fb498cf048cede9ddae5c08a092e80f73608a89c3f3d6b0e2
-
SSDEEP
6144:jNf5Tb9lFfcfQ5Hd52uvFttHAY7MU0FxCamFmebFvmX+uBceA:RfJpHEfed52uv3oUh1tbFOX+uBc
Malware Config
Signatures
Files
-
135415d4c5d73fa1284ddd3a8c799301fc0ee79a2fc925f7961de5b8d48c88d4.exe windows x86
f7d6f5674ce3f5546934ca7d07bba247
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
MultiByteToWideChar
HeapCreate
GetDiskFreeSpaceExA
GetLocaleInfoA
GetCommandLineW
GetStartupInfoA
SetStdHandle
LeaveCriticalSection
EnumCalendarInfoExA
Sleep
FreeEnvironmentStringsA
SetEnvironmentVariableA
GetACP
CloseHandle
VirtualQuery
QueryPerformanceCounter
GetModuleHandleA
CreateFileA
lstrlenA
GetDateFormatA
GetLocaleInfoW
GetStringTypeA
SetUnhandledExceptionFilter
CompareStringA
OpenMutexA
HeapDestroy
GetConsoleMode
WriteConsoleA
WriteConsoleW
GetTimeZoneInformation
GetCurrentThread
GetProcAddress
InterlockedExchange
GetProcessHeap
GetStdHandle
GetOEMCP
TlsGetValue
GetModuleFileNameW
EnterCriticalSection
VirtualFree
SetFilePointer
FlushFileBuffers
GetTimeFormatA
HeapLock
GetConsoleCP
HeapAlloc
GetTickCount
GetModuleFileNameA
GetConsoleOutputCP
EnumSystemLocalesA
InterlockedDecrement
CreateProcessA
GetUserDefaultLCID
GetCurrentProcessId
ExitProcess
IsDebuggerPresent
DeleteCriticalSection
TlsFree
GetCPInfo
CopyFileA
GetCurrentThreadId
IsValidLocale
GetLastError
WideCharToMultiByte
LCMapStringW
TlsAlloc
GetSystemTimeAsFileTime
GetEnvironmentStrings
ReadFile
RtlUnwind
IsValidCodePage
InitializeCriticalSectionAndSpinCount
CreateMutexA
GetEnvironmentStringsW
LCMapStringA
HeapSize
SetConsoleCtrlHandler
WriteFile
HeapFree
GetFileAttributesW
GetStringTypeW
GetCommandLineA
GetStartupInfoW
TerminateProcess
FreeEnvironmentStringsW
VirtualAllocEx
GetFileType
SetLastError
TlsSetValue
LoadLibraryA
GetVersionExA
HeapReAlloc
SetHandleCount
InterlockedIncrement
FileTimeToSystemTime
InitializeCriticalSection
UnhandledExceptionFilter
DeleteFiber
GetCurrentProcess
CompareStringW
FreeLibrary
shell32
DragQueryFileW
SHGetInstanceExplorer
SheChangeDirExW
comctl32
CreatePropertySheetPage
ImageList_Merge
ImageList_SetFilter
ImageList_SetFlags
ImageList_BeginDrag
ImageList_GetIconSize
InitCommonControlsEx
ImageList_GetImageRect
ImageList_GetFlags
ImageList_Replace
user32
SetClassLongW
GetClientRect
OemToCharW
CreateDialogParamW
FreeDDElParam
RegisterClassA
RegisterClassExA
CheckRadioButton
PeekMessageW
RegisterWindowMessageA
OemToCharBuffW
Sections
.text Size: 201KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 67KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ