Static task
static1
Behavioral task
behavioral1
Sample
40217d077e10762829d40552f060147eaf9235d03a1fc4581fbc80dfd931805a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40217d077e10762829d40552f060147eaf9235d03a1fc4581fbc80dfd931805a.exe
Resource
win10v2004-20221111-en
General
-
Target
40217d077e10762829d40552f060147eaf9235d03a1fc4581fbc80dfd931805a
-
Size
185KB
-
MD5
2033e4aafe2162ecc88f30ef5d30ef66
-
SHA1
9a5344fdf5f6f72aaff37aa4422caec310bce0a3
-
SHA256
40217d077e10762829d40552f060147eaf9235d03a1fc4581fbc80dfd931805a
-
SHA512
c844562a67e797cf825a39e9b93d2ccd505da31c66991a2067990a9ac3d3b2c8bf2ce943ef81c31a70c0c069cdb6250dc65ce3403ba447fb28cb3bee0360116e
-
SSDEEP
3072:CnEWyU+dea8BNhBuvmJFEIG3kIgyS9RJySqKgP:CEW1+deDc6F6kVVybz
Malware Config
Signatures
Files
-
40217d077e10762829d40552f060147eaf9235d03a1fc4581fbc80dfd931805a.exe windows x86
f13af88b8c71beb32dd3ecc9abc6f12a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetTickCount
OutputDebugStringA
HeapSize
RaiseException
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
LoadLibraryW
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualQuery
shell32
CommandLineToArgvW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ