Static task
static1
Behavioral task
behavioral1
Sample
f94141b74e4256d38a1bb84a25e29dac0b5a0837809134ba2ccefa1411410f90.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f94141b74e4256d38a1bb84a25e29dac0b5a0837809134ba2ccefa1411410f90.exe
Resource
win10v2004-20220901-en
General
-
Target
f94141b74e4256d38a1bb84a25e29dac0b5a0837809134ba2ccefa1411410f90
-
Size
857KB
-
MD5
2ce1a4c33c38402cccd051b984ab1458
-
SHA1
9366af2cc5e6674185b09b7802d6ff85ed9cd639
-
SHA256
f94141b74e4256d38a1bb84a25e29dac0b5a0837809134ba2ccefa1411410f90
-
SHA512
af131da0f0151dac1752e7268827bf7464c6d1069642436fdf02ea49632c3b2afbcc82a30fd64dbdb9b92a7aa426ae612855c30875334f16419346acfa12d283
-
SSDEEP
24576:Xf09nEigFFDjKhZFoGMQoWluSXlP7e3M:XfgETDirporSy
Malware Config
Signatures
Files
-
f94141b74e4256d38a1bb84a25e29dac0b5a0837809134ba2ccefa1411410f90.exe windows x86
d917ad7b0502839bd8e6b78e724fec29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
SetEndOfFile
GetCommConfig
IsBadHugeWritePtr
WritePrivateProfileSectionW
GetDiskFreeSpaceA
UnhandledExceptionFilter
FreeEnvironmentStringsA
lstrcmpiA
WritePrivateProfileStructW
SetProcessShutdownParameters
GetExitCodeProcess
lstrcmpiW
SetVolumeLabelW
GetLocaleInfoA
EnumLanguageGroupLocalesA
DeleteVolumeMountPointA
IsProcessorFeaturePresent
SetMailslotInfo
FreeEnvironmentStringsW
GetVersionExA
GetPrivateProfileSectionA
GetSystemDefaultLangID
GetCurrentDirectoryW
CreateHardLinkW
GetTimeFormatA
InterlockedCompareExchange
SetEvent
GlobalAlloc
GetCurrencyFormatW
PurgeComm
SetLocaleInfoA
FindFirstVolumeW
FlushInstructionCache
WritePrivateProfileSectionA
SetPriorityClass
UnmapViewOfFile
OutputDebugStringA
GetStringTypeA
FindCloseChangeNotification
GetLocaleInfoW
SetEnvironmentVariableA
LocalCompact
FindFirstFileW
WaitCommEvent
BackupRead
CompareStringW
GetCommState
GetPrivateProfileStructA
FindNextVolumeMountPointA
LocalFileTimeToFileTime
GetLongPathNameW
FindAtomA
CommConfigDialogA
GetTimeFormatW
QueueUserWorkItem
GetStringTypeExA
VerifyVersionInfoA
SetErrorMode
FreeUserPhysicalPages
GetAtomNameW
GetTempPathA
SetThreadIdealProcessor
GetFileTime
MulDiv
GetThreadPriorityBoost
CreateFileMappingA
IsBadStringPtrW
VerSetConditionMask
ContinueDebugEvent
ReplaceFileA
SetNamedPipeHandleState
GetCompressedFileSizeW
SetTapePosition
DnsHostnameToComputerNameW
DeviceIoControl
lstrcpyW
GetModuleHandleW
FileTimeToSystemTime
GetPrivateProfileSectionW
SetHandleInformation
TlsSetValue
GetDateFormatA
GetComputerNameW
PrepareTape
GetFileInformationByHandle
WaitNamedPipeA
EnumDateFormatsExW
SetFileApisToOEM
ReadDirectoryChangesW
GetThreadLocale
GetCurrentDirectoryA
EnumResourceLanguagesW
FindResourceW
_hread
GlobalFix
ProcessIdToSessionId
LoadResource
LocalUnlock
GetFileAttributesExW
GetNumberFormatW
ResumeThread
_llseek
FoldStringW
SetLocalTime
CreateFileMappingW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
lstrcpyA
CompareStringA
GetOverlappedResult
FileTimeToDosDateTime
SetCalendarInfoW
FlushViewOfFile
QueryPerformanceCounter
SearchPathA
ResetEvent
GetThreadPriority
GetSystemInfo
user32
DestroyWindow
CharUpperBuffW
TrackPopupMenuEx
ChildWindowFromPoint
CreateCaret
SetShellWindow
DlgDirListW
MessageBoxIndirectW
IsZoomed
GetGUIThreadInfo
SetSysColors
MsgWaitForMultipleObjects
CallWindowProcW
GetKeyState
LoadCursorFromFileW
TrackMouseEvent
GetWindowRgn
SetMenuItemInfoA
CopyImage
GetMessageA
GetLastInputInfo
EnableWindow
VkKeyScanA
CharLowerW
DdeGetData
shlwapi
PathAppendA
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ