Static task
static1
Behavioral task
behavioral1
Sample
1eb07352e68c33f74c7131537507ba3bce0427f75b0bd6b2690859d7f007e451.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1eb07352e68c33f74c7131537507ba3bce0427f75b0bd6b2690859d7f007e451.exe
Resource
win10v2004-20221111-en
General
-
Target
1eb07352e68c33f74c7131537507ba3bce0427f75b0bd6b2690859d7f007e451
-
Size
528KB
-
MD5
235b62cd40799655d34d4b666eb01c9c
-
SHA1
97647e03392682c129f1d3328fe1601f39ada449
-
SHA256
1eb07352e68c33f74c7131537507ba3bce0427f75b0bd6b2690859d7f007e451
-
SHA512
e440399877d56cb5275db6f3a7d8c6553501fd24d17776f5765738c5ebb2d04050fd03ed23ce6b9bf81d392c4214025ca451b0259302d8e5e3475571d3a89f68
-
SSDEEP
12288:AWKKd8m7mqKoqJZ3sjrUS/Lyqjq3mRFr+v:AWKKKm7mqKoqbU/pr+
Malware Config
Signatures
Files
-
1eb07352e68c33f74c7131537507ba3bce0427f75b0bd6b2690859d7f007e451.exe windows x86
33b55dc74801871e9f454179bb62bd42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCPInfo
GetComputerNameW
OutputDebugStringW
GetModuleHandleW
VirtualFree
GetProcessHeap
lstrlenW
GetLastError
lstrlenA
VirtualAlloc
OutputDebugStringA
GetVersion
HeapReAlloc
IsProcessorFeaturePresent
RtlUnwind
LoadLibraryW
GetComputerNameA
GetCurrentDirectoryW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
SetLastError
GetCurrentThreadId
GetProcAddress
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
HeapAlloc
HeapSize
user32
LoadCursorW
GetCursorPos
GetMessageTime
LoadBitmapA
advapi32
RegOpenKeyExA
GetCurrentHwProfileW
Sections
text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 481KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ