Static task
static1
Behavioral task
behavioral1
Sample
745234ae089224b83a7abbe1ea749cdae7c1334701e3b9011fb27809e0fccd2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
745234ae089224b83a7abbe1ea749cdae7c1334701e3b9011fb27809e0fccd2f.exe
Resource
win10v2004-20220812-en
General
-
Target
745234ae089224b83a7abbe1ea749cdae7c1334701e3b9011fb27809e0fccd2f
-
Size
284KB
-
MD5
0050db4fa939e2142e0eba958825d4b0
-
SHA1
a77612acdf7179159e4c413d9bb8ce8d84b4ceaf
-
SHA256
745234ae089224b83a7abbe1ea749cdae7c1334701e3b9011fb27809e0fccd2f
-
SHA512
90e162b04162a0e5e9561df4467be1c3a87a519f53a2eb835918ca1e09d977956445fa22802ee3817bbcb4bc947e0d8236540a32eede8d4752ead395d75a7809
-
SSDEEP
3072:/Kz9ebc361nPcwKxBGlIR/xa9sF120qir2NtyUe74JVS3gE2KpttsG/UczoI7h+b:/X432exBAegmI0qiCDoQuzo0naGw
Malware Config
Signatures
Files
-
745234ae089224b83a7abbe1ea749cdae7c1334701e3b9011fb27809e0fccd2f.exe windows x86
b1963850540881aa8cd7586e865ad5bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetVolumeInformationA
GetVersionExA
TlsAlloc
TlsFree
Sleep
GetLastError
TlsGetValue
SetWaitableTimer
InterlockedIncrement
GetQueuedCompletionStatus
InterlockedDecrement
InterlockedCompareExchange
SleepEx
TlsSetValue
TerminateThread
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
CreateEventA
HeapFree
WaitForSingleObject
SetEvent
LeaveCriticalSection
InterlockedExchange
SetLastError
QueueUserAPC
EnterCriticalSection
InterlockedExchangeAdd
PostQueuedCompletionStatus
WaitForMultipleObjects
CreateIoCompletionPort
DeleteCriticalSection
CloseHandle
CreateWaitableTimerA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
ReleaseSemaphore
GetCurrentThreadId
GetCurrentProcessId
OpenEventA
ResetEvent
ResumeThread
GetTickCount
SystemTimeToFileTime
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
GetCommandLineA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
SetFilePointer
ws2_32
gethostbyname
WSAStartup
WSACleanup
closesocket
ioctlsocket
sendto
inet_addr
htons
socket
gethostname
inet_ntoa
iphlpapi
GetAdaptersInfo
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ