Static task
static1
Behavioral task
behavioral1
Sample
4273728547d386c7849dc45aac96b5b79a1871fd7dba0cdaa921b2de404b3423.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4273728547d386c7849dc45aac96b5b79a1871fd7dba0cdaa921b2de404b3423.exe
Resource
win10v2004-20221111-en
General
-
Target
4273728547d386c7849dc45aac96b5b79a1871fd7dba0cdaa921b2de404b3423
-
Size
184KB
-
MD5
0b3953200aecb40a75952d5dc07b1329
-
SHA1
9aebeb26a9ef2285a61e79c7cd612d658138c1b1
-
SHA256
4273728547d386c7849dc45aac96b5b79a1871fd7dba0cdaa921b2de404b3423
-
SHA512
f3bb011c197275e2d0a63962b0319609122e407d76657753ea4b8bc46e7be2a89c026864b8e6513b935a3a611448c8da3bebce45022ae5f503b80f92ebb26eb4
-
SSDEEP
1536:QcLG5sWjcdC2qxKtOxcOc2iQy+Zql9Ljsu0L/8DkHKQkprP4MmqJkyi9apcHHgB5:RHC2aiBSyfELkDsr/HqHkhQhe1xsV
Malware Config
Signatures
Files
-
4273728547d386c7849dc45aac96b5b79a1871fd7dba0cdaa921b2de404b3423.exe windows x86
eb430e2d98b0ceb28098187dc14e1c7c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
setupapi
SetupSetFileQueueAlternatePlatformA
advapi32
GetNamedSecurityInfoA
kernel32
CloseHandle
GetModuleFileNameA
GetCurrentThread
GetModuleHandleW
lstrcmpA
VirtualAlloc
CreateEventW
TlsFree
SetHandleCount
LocalFree
GetVersionExW
HeapAlloc
HeapFree
LeaveCriticalSection
GetEnvironmentStringsW
GetProcessVersion
GetCommandLineW
GetVersionExA
GetTickCount
CreateMutexA
CreateSemaphoreA
GetPriorityClass
GetStdHandle
GetEnvironmentStrings
GetCurrentProcessId
RtlUnwind
GetCommandLineA
VirtualQuery
GetLastError
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
CreateFileW
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
CreateSemaphoreW
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
FatalAppExitA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ