Static task
static1
Behavioral task
behavioral1
Sample
b12883a1163b000a6bbfd5b8ebdcb98cab8aa3d27b46a99104a468f7105afadd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b12883a1163b000a6bbfd5b8ebdcb98cab8aa3d27b46a99104a468f7105afadd.exe
Resource
win10v2004-20220812-en
General
-
Target
b12883a1163b000a6bbfd5b8ebdcb98cab8aa3d27b46a99104a468f7105afadd
-
Size
252KB
-
MD5
4329f15ade942fe45124d3609a9c7270
-
SHA1
2275e1704aee30c407e1c9871f0b254c4cb6be97
-
SHA256
b12883a1163b000a6bbfd5b8ebdcb98cab8aa3d27b46a99104a468f7105afadd
-
SHA512
0d510f11bdfb903f72ad5e66ec2c2aee420affc72550d96306788cd225b6f868d0a24edd4c09046e4d0ecddf577f994a3db1c1dcdf603df4e668d2b8867732c3
-
SSDEEP
3072:zGpL6dRz87d95qGIZZlqFII5ouTh1PVqQPT94wdq9FDALeNzmMDy9jWqBmr2:SpL6vzMd9SlrQhFoW94wYAL4zmMYmC
Malware Config
Signatures
Files
-
b12883a1163b000a6bbfd5b8ebdcb98cab8aa3d27b46a99104a468f7105afadd.exe windows x86
49206b10946da399de8fe4228df98bdb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
GetTickCount
VirtualAlloc
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
RtlUnwind
CloseHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LoadLibraryA
MultiByteToWideChar
ReadFile
CreateFileA
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
SetFilePointer
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
RaiseException
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ