Static task
static1
Behavioral task
behavioral1
Sample
231186f1487c736ed3e6207d694a054e9e6182b2fa1618cc1da0f8c962a7af66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
231186f1487c736ed3e6207d694a054e9e6182b2fa1618cc1da0f8c962a7af66.exe
Resource
win10v2004-20221111-en
General
-
Target
231186f1487c736ed3e6207d694a054e9e6182b2fa1618cc1da0f8c962a7af66
-
Size
605KB
-
MD5
b269a32762a353786f606a3fd005ea68
-
SHA1
3c2744ff186ded5e2a38fe37bf08aa538cd9849b
-
SHA256
231186f1487c736ed3e6207d694a054e9e6182b2fa1618cc1da0f8c962a7af66
-
SHA512
7f7e387b60d6137d33e6d6c2a283c5ac738e4d14684a0e6e875d0b7056ae7c2d5f0107f7d4f6f151768a7e68b2f91b6c74dfabd53f134ca9922e21d8545b8e7d
-
SSDEEP
12288:oaj/k1LcS1mFO5O09y58vtpfEmlzK28iXg8a8J8Y4opW9:oaj81L5/yObf5Bb8z8dJqh
Malware Config
Signatures
Files
-
231186f1487c736ed3e6207d694a054e9e6182b2fa1618cc1da0f8c962a7af66.exe windows x86
e1e81f641907ffbc1528edc0c3184464
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetCurrentThreadId
GetVersion
GetTickCount
GetLastError
GetCurrentProcessId
ExitProcess
GetModuleHandleA
VirtualAlloc
FindResourceA
IsBadReadPtr
Sleep
VirtualFree
HeapCreate
IsValidCodePage
InterlockedExchange
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
WideCharToMultiByte
GetCommandLineW
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
CreateFileA
GetFileType
CreateEventA
CreateFileW
GetProcAddress
DuplicateHandle
CreateFileMappingA
CompareStringA
FindFirstFileA
GetProcessHeap
GlobalLock
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
IsBadWritePtr
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GetConsoleMode
GlobalAlloc
TerminateProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FreeLibrary
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteFile
lstrcmpiA
GetCPInfo
FreeEnvironmentStringsW
LocalAlloc
GetLocaleInfoA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
GetStdHandle
HeapDestroy
LockResource
WaitForSingleObject
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetSystemTimeAsFileTime
user32
SetCursor
CallWindowProcA
GetClientRect
IsWindowVisible
SystemParametersInfoA
MoveWindow
GetDesktopWindow
ScreenToClient
GetDlgItem
SetTimer
SetWindowTextA
SetWindowLongA
GetWindowRect
EndPaint
CreateWindowExA
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
TranslateMessage
EnableWindow
UpdateWindow
GetParent
DestroyWindow
SendMessageA
DrawTextA
GetDC
DispatchMessageA
SetWindowPos
PostQuitMessage
Sections
.text Size: 573KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ