Static task
static1
Behavioral task
behavioral1
Sample
b430b1f67c739467703d7b700e2cf6477fa0e4c419526413c553610608eef406.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b430b1f67c739467703d7b700e2cf6477fa0e4c419526413c553610608eef406.exe
Resource
win10v2004-20221111-en
General
-
Target
b430b1f67c739467703d7b700e2cf6477fa0e4c419526413c553610608eef406
-
Size
19.0MB
-
MD5
463a4b2e443106540b37372c038e4d87
-
SHA1
a5a6d1460517a1e8f25021740255462cdf8834f2
-
SHA256
b430b1f67c739467703d7b700e2cf6477fa0e4c419526413c553610608eef406
-
SHA512
d3be40911659171ff08640d0ac13b7d102f8daf7cfad95b08139755de707403d6d3272246fec63178d56f37f78ad2d2f8ab2414f45b5ab57a73ce25ef5c43cf5
-
SSDEEP
393216:qJ6faaCktknAlgP9WPN3n2rf/aVFhCS86Z+TbiQ1jaUD59ErqNudrcgXrLk:qJ6faaCEblglWPN32z/aLfZ+PP1jh59j
Malware Config
Signatures
Files
-
b430b1f67c739467703d7b700e2cf6477fa0e4c419526413c553610608eef406.exe windows x86
de344a36786ad69cbab0916e3c95cc4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
SetFileApisToOEM
FindClose
FindFirstFileW
WideCharToMultiByte
GetACP
MultiByteToWideChar
InterlockedExchangeAdd
GetVersionExW
FindResourceW
GetModuleHandleW
GetLastError
SetFilePointer
ReadFile
CreateFileW
CloseHandle
FreeLibrary
LoadLibraryW
GetProcAddress
CreateThread
ExitThread
ResetEvent
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
SetConsoleCtrlHandler
RtlUnwind
RaiseException
GetStringTypeA
GetStringTypeW
GetCPInfo
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetFileAttributesW
FormatMessageW
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
DeleteFileW
CreateDirectoryW
GetFullPathNameW
GetTempFileNameW
MoveFileW
SetFileTime
lstrlenW
SetFileAttributesW
GetFileSize
SetEndOfFile
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
SetEvent
ResumeThread
user32
LoadStringW
Sections
.text Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ