Static task
static1
Behavioral task
behavioral1
Sample
236eb4b6c7cc5e270e4540f23c78a255b502f78c5f19fed1c476963935e816ac.exe
Resource
win7-20220901-en
General
-
Target
236eb4b6c7cc5e270e4540f23c78a255b502f78c5f19fed1c476963935e816ac
-
Size
975KB
-
MD5
5847b9ede173b9906cd97d16d8f439ae
-
SHA1
252e1ef6da885fdd3b730ac7d37d3f062aed9b69
-
SHA256
236eb4b6c7cc5e270e4540f23c78a255b502f78c5f19fed1c476963935e816ac
-
SHA512
49caf512a6b6c07a0f949dc45eb8b803658ce5f98c0b0382468dd1fe5372a19d69eeff0bf7a488f4f91f8334342b1f5f45a342394c4450ed24d619b34c7615c1
-
SSDEEP
6144:aZ7l+qrvVra1h+9tbZ8WyAJe/V0TUJp9497AXJRpte6ECZkgwTSkne8CpiKk:cro1s9tWmetKw9qsHptemz7kne8CY
Malware Config
Signatures
Files
-
236eb4b6c7cc5e270e4540f23c78a255b502f78c5f19fed1c476963935e816ac.exe windows x86
40fa8b3af6b860b6277fa6147af34330
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegNotifyChangeKeyValue
AdjustTokenGroups
BuildTrusteeWithObjectsAndNameW
gdi32
SetICMMode
GetOutlineTextMetricsA
SelectClipPath
kernel32
FindNextVolumeA
FreeLibrary
GetCurrentProcess
GetDefaultCommConfigW
GetPrivateProfileStructW
GetProcAddress
GetProcessHeap
GetSystemWindowsDirectoryA
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LocalAlloc
LocalFree
LocalReAlloc
SetFileApisToANSI
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
ClearCommError
SetEvent
WriteFile
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualAlloc
FillConsoleOutputAttribute
GetTimeFormatW
ResetEvent
WaitForSingleObject
GetCPInfo
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
FindFirstFileA
FindNextFileA
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapFree
HeapAlloc
WideCharToMultiByte
ExitProcess
GetCommandLineA
GetVersionExA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
IsDebuggerPresent
RtlUnwind
InitializeCriticalSection
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
GetFullPathNameA
GetFileAttributesA
SetFilePointer
GetFileAttributesW
SetHandleCount
GetFileType
HeapReAlloc
RaiseException
SetConsoleCtrlHandler
LoadLibraryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoA
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
CreateFileA
CloseHandle
GetTimeZoneInformation
GetDriveTypeA
GetExitCodeProcess
CreateProcessA
SetStdHandle
HeapSize
GetConsoleCP
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
FlushFileBuffers
SetEndOfFile
ReadFile
ole32
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 372KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE