Static task
static1
Behavioral task
behavioral1
Sample
2096ffb021f80686e43b7ccd2bb64c20031472d90bcadadded16f4a8bbd7c311.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2096ffb021f80686e43b7ccd2bb64c20031472d90bcadadded16f4a8bbd7c311.exe
Resource
win10v2004-20220812-en
General
-
Target
2096ffb021f80686e43b7ccd2bb64c20031472d90bcadadded16f4a8bbd7c311
-
Size
292KB
-
MD5
99c4e136a26726a185b33254800dbbdf
-
SHA1
a1e30ac3e313cd345bc764b944c58c941f21e67e
-
SHA256
2096ffb021f80686e43b7ccd2bb64c20031472d90bcadadded16f4a8bbd7c311
-
SHA512
d8ccca69a051df889beff4714a4c168767662e3c3080209dd7b8b2909913e152b5754c1d0c72d76caebd3323f8b6c17e54cd666dd721f19faff1541439f94d4d
-
SSDEEP
3072:ZKT0SCy4QDMT/1BvOeA7WTe7FLljBaPNr7varwVbUZUev2b+:Z/vX/1m37FPkNlTeO
Malware Config
Signatures
Files
-
2096ffb021f80686e43b7ccd2bb64c20031472d90bcadadded16f4a8bbd7c311.exe windows x86
a8a0f4a5b91f47ab90659a74e2bac9c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetCurrentThreadId
VirtualFree
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetProcessHeap
HeapAlloc
SetEvent
HeapCompact
ReleaseMutex
GetLastError
GetCurrentProcess
WaitForSingleObject
CloseHandle
LeaveCriticalSection
VirtualProtect
GetLocaleInfoA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
SetFilePointer
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
RaiseException
ExitProcess
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemInfo
user32
EnumWindows
GetTopWindow
GetSysColorBrush
PostMessageA
ShowWindow
UpdateWindow
FindWindowA
shell32
SHGetFolderPathA
SHGetFileInfoA
urlmon
FindMimeFromData
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ