Static task
static1
Behavioral task
behavioral1
Sample
4a32a8db10f45e2dff4550311ff4d09da7e5a638b9ce6f27d29d6fe204e51d20.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4a32a8db10f45e2dff4550311ff4d09da7e5a638b9ce6f27d29d6fe204e51d20.exe
Resource
win10v2004-20221111-en
General
-
Target
4a32a8db10f45e2dff4550311ff4d09da7e5a638b9ce6f27d29d6fe204e51d20
-
Size
114KB
-
MD5
09224b825f56cbeddc1f885f4e322a40
-
SHA1
2ba82c2fee8722cac65978aca2712245b192500e
-
SHA256
4a32a8db10f45e2dff4550311ff4d09da7e5a638b9ce6f27d29d6fe204e51d20
-
SHA512
b68589afe4a557d09aea74dbd6a3d6796ab5e1961b8f10d43375e4340cc96f2e08438785d38891ba39becd48f2196ce5c8b3cb343b1083704fa3f017c952940e
-
SSDEEP
3072:B+3rnRRy6Z296cjNZGIwpYYdftMdzsFGY9fY:orRRyD5E8YZOCQYO
Malware Config
Signatures
Files
-
4a32a8db10f45e2dff4550311ff4d09da7e5a638b9ce6f27d29d6fe204e51d20.exe windows x86
e0a6f1a5e11a74ff57a4ed98431b488f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedDecrement
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
GetCurrentProcessId
ExitProcess
Sleep
LoadLibraryW
GetProcessHeap
GetModuleHandleW
GetModuleHandleA
GetProcAddress
GetLastError
CreateProcessA
HeapCompact
EncodePointer
IsProcessorFeaturePresent
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ