Static task
static1
Behavioral task
behavioral1
Sample
039cd156ae7ec7b41857db1cdedac32fef0619278a6af6bda54a8a20b0530873.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
039cd156ae7ec7b41857db1cdedac32fef0619278a6af6bda54a8a20b0530873.exe
Resource
win10v2004-20220901-en
General
-
Target
039cd156ae7ec7b41857db1cdedac32fef0619278a6af6bda54a8a20b0530873
-
Size
88KB
-
MD5
3a5eedc74ab47f62046eb9c4969278de
-
SHA1
b55e3bea92403297f9b9c3637e36bc5b5dc32273
-
SHA256
039cd156ae7ec7b41857db1cdedac32fef0619278a6af6bda54a8a20b0530873
-
SHA512
572777187395a4d6f948359d326b4a4b0a8d243a253c9bae429bb1c441c09a650a39e864f7c1ee2ce69bb95dd713ace140a12702a08fa8f85fd8b0e72b275d83
-
SSDEEP
1536:cONvDg3TL1BYuo6LlmFvEhWyR4jmKoC06TZrA6t55P:cONv2BYP6LlRhZei6VLH5
Malware Config
Signatures
Files
-
039cd156ae7ec7b41857db1cdedac32fef0619278a6af6bda54a8a20b0530873.exe windows x86
67f97966665a26bcf33b75ee31383383
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
ExitProcess
HeapAlloc
GetProcessHeap
UnmapViewOfFile
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
VirtualAlloc
FindResourceA
SizeofResource
LoadResource
VirtualFree
LockResource
HeapReAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
HeapSize
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
MessageBoxA
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE