Static task
static1
Behavioral task
behavioral1
Sample
f1eb3681d121b45c0a1f330d9708bbef40ee5570067acc3a238e8da16ad8fd2d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1eb3681d121b45c0a1f330d9708bbef40ee5570067acc3a238e8da16ad8fd2d.exe
Resource
win10v2004-20220812-en
General
-
Target
f1eb3681d121b45c0a1f330d9708bbef40ee5570067acc3a238e8da16ad8fd2d
-
Size
295KB
-
MD5
c1a460115e757a30d1e70ab79e6e7abc
-
SHA1
ec7e3da6aaf1f3247189732f997fd535b16a157d
-
SHA256
f1eb3681d121b45c0a1f330d9708bbef40ee5570067acc3a238e8da16ad8fd2d
-
SHA512
202ba40829735e01d6cc809a2e964ef438241a088c448abe93d815ccd00f56428f365b4273c7ca036ee6030c0b392c5aef555e03c71356c8baff39d786ff2b99
-
SSDEEP
6144:YFBLHT/5oGXLKMioMTj4P+YMsGOkk4W4HTPs2erNm3:Y/v/5oGXUtT82YXRL4Wd22g3
Malware Config
Signatures
Files
-
f1eb3681d121b45c0a1f330d9708bbef40ee5570067acc3a238e8da16ad8fd2d.exe windows x86
d21b34f002b38e96a76db976d718fdc4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
VirtualFree
GetProcessHeap
GetModuleFileNameW
GetSystemDirectoryA
OpenMutexW
GetLastError
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetCurrentDirectoryA
OutputDebugStringA
GetSystemTime
HeapSize
SetEndOfFile
ReadFile
GetComputerNameW
GetCPInfo
lstrlenA
IsDebuggerPresent
GetCommandLineW
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapFree
CloseHandle
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CreateFileA
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RaiseException
user32
IsZoomed
GetForegroundWindow
GetProcessDefaultLayout
advapi32
RegOpenKeyExW
GetUserNameW
GetCurrentHwProfileW
Sections
.text Size: - Virtual size: 30.5MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ