Static task
static1
Behavioral task
behavioral1
Sample
850af59d75ac773dcba81ae7d9493d3215dbed2d2b1b9d7a54a16c14a0b5b102.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
850af59d75ac773dcba81ae7d9493d3215dbed2d2b1b9d7a54a16c14a0b5b102.exe
Resource
win10v2004-20220812-en
General
-
Target
850af59d75ac773dcba81ae7d9493d3215dbed2d2b1b9d7a54a16c14a0b5b102
-
Size
3.2MB
-
MD5
c18db26f1033e0e2e2f91f5509cdb87c
-
SHA1
de048ea07d348b2444cf13254ae24a7122dcb583
-
SHA256
850af59d75ac773dcba81ae7d9493d3215dbed2d2b1b9d7a54a16c14a0b5b102
-
SHA512
459a8042ec4ecc6fb5296edcaa3b18cf769d951af6c1e1cfc88c00554cc2d158998abf928fb4421edd07e5a06b31a59e61899ad7d83c0cd50e8d12fc27908169
-
SSDEEP
49152:K9nY1GLQBQDo56DWskgSGKjGRT8IIOuCltlgLOApVeNSij4cK9QT0apr7XstNfKI:KDQiEapKuT89Ou4frAuMse9Qrpr7u1V
Malware Config
Signatures
Files
-
850af59d75ac773dcba81ae7d9493d3215dbed2d2b1b9d7a54a16c14a0b5b102.exe windows x86
cfb5de7a0e2f9ba61e52d71c3a55897f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ReadFile
DeleteFileA
WriteFile
RemoveDirectoryA
LoadLibraryA
GetProcAddress
GetTempPathA
GetFileAttributesA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
GetModuleFileNameW
GetProcessId
AddVectoredExceptionHandler
TerminateProcess
GetLocalTime
SystemTimeToFileTime
CreateFileW
HeapAlloc
HeapFree
CreateMutexA
SetLastError
GetModuleHandleExW
InitializeCriticalSection
SetUnhandledExceptionFilter
GetCurrentDirectoryW
GetCurrentThreadId
InterlockedCompareExchange
SetCurrentDirectoryW
ExitProcess
DeleteCriticalSection
TerminateThread
OpenThread
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
VirtualFree
CloseHandle
Sleep
GetProcessHeap
GetTickCount
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
HeapReAlloc
GetStringTypeW
SetEndOfFile
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
user32
MessageBoxA
DispatchMessageW
PostMessageA
MessageBoxW
PeekMessageW
ShowWindow
PeekMessageA
TranslateMessage
Sections
.text Size: 1015KB - Virtual size: 1015KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ