Static task
static1
Behavioral task
behavioral1
Sample
71ca4d8abc4efb914f6e3d7a695178093db21790845d8d039f43f4e96aba4d15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71ca4d8abc4efb914f6e3d7a695178093db21790845d8d039f43f4e96aba4d15.exe
Resource
win10v2004-20221111-en
General
-
Target
71ca4d8abc4efb914f6e3d7a695178093db21790845d8d039f43f4e96aba4d15
-
Size
486KB
-
MD5
3ba3e69ace7be7d3b21061d8e702ba4a
-
SHA1
122c4a7dd6a95f7d3a9c594e83b8138f2bc929e0
-
SHA256
71ca4d8abc4efb914f6e3d7a695178093db21790845d8d039f43f4e96aba4d15
-
SHA512
340c58c943a7b5f32e97c7d53b3754843993c789ba5cf2edd02b95f331528b3063a39aa20fed6eedb689664eb73343747d2ae2407f46381f11499543126d854a
-
SSDEEP
12288:DPgCFH3YA/+NU5HiKb0l8U2rDnGFdpfi4PwxkvQ1Odd6lgTqYOKXlr:DPd13YA/+e5CKbm8lDYU4IoQ1Y6mYK1r
Malware Config
Signatures
Files
-
71ca4d8abc4efb914f6e3d7a695178093db21790845d8d039f43f4e96aba4d15.exe windows x86
3886684d42d2cc7c6abbf08e5d38dfb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GetCommandLineA
GetModuleHandleA
RtlUnwind
GetVersion
GetSystemTimeAsFileTime
ExitProcess
SetFilePointer
GetStdHandle
GetModuleFileNameA
GetLastError
TerminateProcess
MultiByteToWideChar
CreateMutexW
CreateMutexA
GetCurrentThreadId
WriteFile
FreeEnvironmentStringsW
SetConsoleWindowInfo
GetStartupInfoW
TlsGetValue
OpenMutexA
GetACP
UnhandledExceptionFilter
GetStartupInfoA
SetHandleCount
FlushFileBuffers
GetFullPathNameA
InterlockedIncrement
ReadFile
GetCPInfo
GetSystemTime
LoadLibraryA
TlsAlloc
GetEnvironmentStringsW
GetCurrentThread
HeapAlloc
LoadLibraryExA
GetLocalTime
GetModuleFileNameW
GetProcAddress
VirtualFree
QueryPerformanceCounter
HeapReAlloc
SetLastError
VirtualAlloc
VirtualQuery
GetCommandLineW
WideCharToMultiByte
HeapCreate
DeleteCriticalSection
HeapDestroy
LCMapStringW
SetEnvironmentVariableA
SetStdHandle
GetFileType
TlsFree
InitializeCriticalSection
IsBadWritePtr
GetTickCount
TlsSetValue
CompareStringW
GetEnvironmentStrings
CloseHandle
GetCurrentProcessId
GetCurrentProcess
HeapFree
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
GetTimeZoneInformation
FreeEnvironmentStringsA
LeaveCriticalSection
InterlockedExchange
InterlockedDecrement
user32
RegisterClassA
DestroyCaret
RegisterClassExA
OffsetRect
AppendMenuW
BroadcastSystemMessageW
MonitorFromPoint
SetWinEventHook
comctl32
InitCommonControlsEx
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ