Static task
static1
Behavioral task
behavioral1
Sample
0de29e3f4bc838249cc43d0f8bd52c9d0bfba7fa27a79cc4c9bb91a1c3fb0c00.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0de29e3f4bc838249cc43d0f8bd52c9d0bfba7fa27a79cc4c9bb91a1c3fb0c00.exe
Resource
win10v2004-20220812-en
General
-
Target
0de29e3f4bc838249cc43d0f8bd52c9d0bfba7fa27a79cc4c9bb91a1c3fb0c00
-
Size
76KB
-
MD5
cfb820c6fe247a47b34315303a534b4e
-
SHA1
81084b76f406ec8b9b281c54960609d0e816af21
-
SHA256
0de29e3f4bc838249cc43d0f8bd52c9d0bfba7fa27a79cc4c9bb91a1c3fb0c00
-
SHA512
860852c50e8f28a7fb47159cb3f8d64c3f9d75a85db74f1d2f5b1163ed82d2ee6de63e07686b12de024c3c0bfea17d4f4ba01305da8655b873299ed97efb78b1
-
SSDEEP
768:v1uNvlzHqSlOqdjB/gLsQKU2+PF1r3r4KuIDJQA7pXJy/+ptH1hXH1pvroYp:kjqfqNRlUxiKQA7pZyY1broYp
Malware Config
Signatures
Files
-
0de29e3f4bc838249cc43d0f8bd52c9d0bfba7fa27a79cc4c9bb91a1c3fb0c00.exe windows x86
35744d8ff79f587c52eb07a52edb094d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeLibrary
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
IsBadReadPtr
IsBadCodePtr
GetProcAddress
ReadFile
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE