Static task
static1
Behavioral task
behavioral1
Sample
2811ebd416aa6057f0acd63980eb81452fc04d57901d2bb71f1f54b67d606814.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2811ebd416aa6057f0acd63980eb81452fc04d57901d2bb71f1f54b67d606814.exe
Resource
win10v2004-20220812-en
General
-
Target
2811ebd416aa6057f0acd63980eb81452fc04d57901d2bb71f1f54b67d606814
-
Size
122KB
-
MD5
f5fca738eeb91bd105322677162325a9
-
SHA1
8872b7fe0bd05e390ee70fb2f4c74c875ad07e4a
-
SHA256
2811ebd416aa6057f0acd63980eb81452fc04d57901d2bb71f1f54b67d606814
-
SHA512
e8d2ecb37b95b813a3ba368e3706199751c74851e8fec5a3f3cd89ea4b5bb7de4619614af05438bbdd7f0237804d3dfd62df8e9290ade4c6b3f1b331052031dd
-
SSDEEP
3072:WLD+1ReXDsoUfWBeDhzgzz5MYh/6srzGRLH:WLD1DsoUfceDhzgzJ/6sK
Malware Config
Signatures
Files
-
2811ebd416aa6057f0acd63980eb81452fc04d57901d2bb71f1f54b67d606814.exe windows x86
950e2fa6d2aaa797dc3902d1e2f2bc4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenMutexW
GetProcAddress
VirtualAlloc
GetModuleFileNameA
GetModuleHandleA
OutputDebugStringA
GetCurrentProcessId
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
lstrlenW
GetCPInfo
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
user32
GetWindowRect
GetForegroundWindow
GetWindowTextW
GetDesktopWindow
advapi32
GetUserNameA
GetCurrentHwProfileW
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ