Static task
static1
Behavioral task
behavioral1
Sample
710e4edabcf07fff10ff5557895279d5630302b78e365f10add6c322a1d64022.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
710e4edabcf07fff10ff5557895279d5630302b78e365f10add6c322a1d64022.exe
Resource
win10v2004-20220812-en
General
-
Target
710e4edabcf07fff10ff5557895279d5630302b78e365f10add6c322a1d64022
-
Size
196KB
-
MD5
43e4087568e495b728bc4e767e07e640
-
SHA1
3a190398d92fe6859a0c4c9039f3ca35f6a329c0
-
SHA256
710e4edabcf07fff10ff5557895279d5630302b78e365f10add6c322a1d64022
-
SHA512
8d2ef7735e4f60d01933b41be44adedf191557861b184ce586a721c35633069388dc05da4abc82abec5493c0afefa46bb89873384556ac67819192087496fb9b
-
SSDEEP
3072:ywU2GcYLLiYUErRXOeQIeCHR1tPDBIP/N0qsA4dwq9KgVK/JP2QWoTuQvMeOwwKB:hU2foLLaShD6N+AEXs/JP2QWoqQvBB15
Malware Config
Signatures
Files
-
710e4edabcf07fff10ff5557895279d5630302b78e365f10add6c322a1d64022.exe windows x86
28ff5c55cb5ae64e52c155395ae19dbe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetCommandLineW
PulseEvent
GetModuleHandleW
GetTickCount
VirtualFree
GetModuleFileNameW
FlushInstructionCache
GetProcAddress
VirtualAlloc
LoadLibraryA
GetModuleHandleA
VirtualProtect
ResumeThread
GetLastError
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ