Static task
static1
Behavioral task
behavioral1
Sample
267ea3542987795c6e34298e5e43efbd9681db006901aecd23824122a810e437.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
267ea3542987795c6e34298e5e43efbd9681db006901aecd23824122a810e437.exe
Resource
win10v2004-20220812-en
General
-
Target
267ea3542987795c6e34298e5e43efbd9681db006901aecd23824122a810e437
-
Size
286KB
-
MD5
5cb43bf4b7e5329caa8d51f59f8774d5
-
SHA1
5cf6138ddfba03f6922e15894f47a23e69bebc2c
-
SHA256
267ea3542987795c6e34298e5e43efbd9681db006901aecd23824122a810e437
-
SHA512
9858b482d9c82f50f683ec6dbb48ebb937af8cf515cf6be0b933b1873fad3708d506d421376593cbcd01e606efc61e01886c66f9dc2704d6c2d97727e0960081
-
SSDEEP
3072:dRbZEXlwNqK5HzGyx6jZ8UA7z9YP3vYcghUg1ObLt:d1dqNT3JghS5
Malware Config
Signatures
Files
-
267ea3542987795c6e34298e5e43efbd9681db006901aecd23824122a810e437.exe windows x86
c39f6e12405ff61cb361aa5e0275889f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
TlsFree
CloseHandle
WaitForMultipleObjects
CreateThread
CreateMutexA
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetTempPathW
VirtualFreeEx
GetEnvironmentStringsW
MoveFileWithProgressA
CancelWaitableTimer
SetHandleCount
FlushInstructionCache
GetCommandLineA
GetVersionExA
GetStartupInfoA
GetLastError
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetFileType
DeleteCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
LoadLibraryExA
InitializeCriticalSection
Sleep
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ