Static task
static1
Behavioral task
behavioral1
Sample
c11d3075a296b4faa3e4c03f8500817f39166a9e04f0efb7b83991b719ab3a52.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c11d3075a296b4faa3e4c03f8500817f39166a9e04f0efb7b83991b719ab3a52.exe
Resource
win10v2004-20220812-en
General
-
Target
c11d3075a296b4faa3e4c03f8500817f39166a9e04f0efb7b83991b719ab3a52
-
Size
96KB
-
MD5
ac860793d3bd58a5c87941f32ebe6f13
-
SHA1
773c77d381b76508082b2d25f96b478f27f43172
-
SHA256
c11d3075a296b4faa3e4c03f8500817f39166a9e04f0efb7b83991b719ab3a52
-
SHA512
31e21bb8d0a5c716db8e13c72f33fd188b4101c3159f273fdb87c29a39617a93a49bc7ceac9e9834e0e6260db9f85690c1bfa22b3ff10f8d91e5956e20f9922c
-
SSDEEP
1536:OLe+tZ85AGLIk0ltzD1s/8foaAVO1zJnYOV4pmnvu8N3D+X9SGSF:G5tG3z0ltzRsSsOspmnvu+DAcG0
Malware Config
Signatures
Files
-
c11d3075a296b4faa3e4c03f8500817f39166a9e04f0efb7b83991b719ab3a52.exe windows x86
64d0520f5d4bc4f96adeebaa325fc6bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleCtrlHandler
GetEnvironmentVariableA
IsDBCSLeadByte
SetConsoleMode
GetConsoleMode
ExitProcess
LocalFree
FormatMessageA
GetLastError
WriteFile
HeapSize
GetSystemInfo
VirtualProtect
GetLocaleInfoA
VirtualQuery
InterlockedExchange
RtlUnwind
LoadLibraryA
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringW
GetCPInfo
CompareStringA
ReadFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
SetFilePointer
CreateFileA
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
RaiseException
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
CloseHandle
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersionExA
DuplicateHandle
WriteConsoleA
DeleteFileA
FlushFileBuffers
GetFileAttributesA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
WideCharToMultiByte
SetEndOfFile
user32
CharToOemA
ntwdblib
ord23
ord94
ord29
ord28
ord24
ord31
ord51
ord43
ord48
ord71
ord159
ord70
ord75
ord58
ord93
ord74
ord157
ord66
ord53
ord34
ord17
ord78
ord64
ord11
ord77
ord18
ord124
ord129
ord121
ord25
ord49
ord30
ord32
ord160
ord76
Sections
.text Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE