Static task
static1
Behavioral task
behavioral1
Sample
03857fbcfb14e7052694af34199fce202f72f02128d56b8d4123a64fa024e79a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03857fbcfb14e7052694af34199fce202f72f02128d56b8d4123a64fa024e79a.exe
Resource
win10v2004-20220812-en
General
-
Target
03857fbcfb14e7052694af34199fce202f72f02128d56b8d4123a64fa024e79a
-
Size
294KB
-
MD5
c244732839b2a69fd3090a75091053a2
-
SHA1
58dd58b64586e81f76a39736732cfbd4c1194285
-
SHA256
03857fbcfb14e7052694af34199fce202f72f02128d56b8d4123a64fa024e79a
-
SHA512
e5349e58f1ef57d410970eb0641c57a5bc0183653436f004654dc78ec0fbf6572d0f4abb03b59a7f041754b17dabdec024c3e660eae8897420d828d998040454
-
SSDEEP
6144:yaQiCDgJfEcSPzk126gjc+X+TWoXajBpQ:NQAfEcSrn4+HoXaFpQ
Malware Config
Signatures
Files
-
03857fbcfb14e7052694af34199fce202f72f02128d56b8d4123a64fa024e79a.exe windows x86
7f92f20723326a5eb458601fae0f9172
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetCurrentProcessId
WriteFile
GetCurrentThreadId
CreateEventW
ExitProcess
GetProcAddress
GetCommandLineA
HeapAlloc
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
GetStdHandle
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ