Static task
static1
Behavioral task
behavioral1
Sample
f2f94b95b30765f1c590f4e67a0227b7a09be26990ce5358a0ee3323e7a25336.exe
Resource
win7-20220812-en
General
-
Target
f2f94b95b30765f1c590f4e67a0227b7a09be26990ce5358a0ee3323e7a25336
-
Size
926KB
-
MD5
a3ccec562af2e9dfa5be8c0e61912bf6
-
SHA1
cc9b746972d23256f2774f5c8d81fb699cb75a96
-
SHA256
f2f94b95b30765f1c590f4e67a0227b7a09be26990ce5358a0ee3323e7a25336
-
SHA512
f5505efaa2f56682eeaa1847e65c84eab6105a550593cdf5753783df2d3f26a91abf3064c3662554982d50de65bf0fa9d5a7c6950976cdd14a7b5a82af3f5cdd
-
SSDEEP
12288:uFOxkO2uswdyOWx0AtM2L7kAEoFOsW669BAlqB92b2YNUQ2PdVmS9NrC:piO2HAyO7Atp7k7QlqT2b2w4dBN
Malware Config
Signatures
Files
-
f2f94b95b30765f1c590f4e67a0227b7a09be26990ce5358a0ee3323e7a25336.exe windows x86
ebea3fd082439f103b9025647484718d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingW
CreateNamedPipeA
CreateFileW
OpenFileMappingW
LocalFlags
TlsGetValue
CreateNamedPipeW
GetModuleFileNameW
TlsAlloc
CompareFileTime
CreateDirectoryW
_hread
CancelIo
GetExitCodeProcess
GlobalAlloc
lstrcmpA
GetDefaultCommConfigA
EndUpdateResourceA
ConvertDefaultLocale
DeleteFileW
_hwrite
SetFilePointer
AssignProcessToJobObject
CreateMailslotW
SystemTimeToFileTime
WritePrivateProfileSectionW
GetSystemPowerStatus
UnhandledExceptionFilter
GetProcessVersion
GetDateFormatW
SetProcessShutdownParameters
SetThreadLocale
EnumLanguageGroupLocalesA
Thread32First
FindAtomW
GetCurrentProcess
SetEnvironmentVariableW
GetTimeFormatA
BackupWrite
GetThreadTimes
SetFileTime
GetPrivateProfileSectionNamesW
GetTempFileNameW
WaitNamedPipeA
WaitForMultipleObjects
OpenWaitableTimerA
PrepareTape
GetProcessHeaps
DeleteTimerQueueEx
GetCurrencyFormatW
GetDiskFreeSpaceExA
DeleteVolumeMountPointA
SetTapeParameters
CreateHardLinkA
LocalCompact
WaitCommEvent
ExpandEnvironmentStringsW
lstrcmpiA
GlobalFree
LocalFree
CreateJobObjectA
SetNamedPipeHandleState
MulDiv
lstrcatW
GetBinaryTypeA
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
LockFileEx
FileTimeToLocalFileTime
DeleteTimerQueue
GetUserDefaultUILanguage
VerifyVersionInfoW
FreeEnvironmentStringsA
IsProcessorFeaturePresent
FindResourceExA
GetFileInformationByHandle
GetTickCount
GlobalFix
EnumResourceLanguagesW
SetSystemTimeAdjustment
FindNextChangeNotification
GetSystemDefaultLangID
CreateDirectoryExA
CreateWaitableTimerA
ResetWriteWatch
SwitchToThread
GetModuleHandleW
SetFileAttributesA
LocalShrink
TlsFree
GetModuleHandleA
SetTimerQueueTimer
InterlockedExchange
GetDefaultCommConfigW
SetThreadPriorityBoost
SetThreadIdealProcessor
GetModuleFileNameA
EnumUILanguagesA
VerSetConditionMask
lstrlenW
RtlUnwind
IsValidLocale
GetStringTypeExW
OpenWaitableTimerW
SetEvent
lstrlenA
lstrcatA
IsBadCodePtr
ReadDirectoryChangesW
SetErrorMode
CreateIoCompletionPort
GetLocalTime
GetCalendarInfoA
EnumSystemLanguageGroupsA
GetFileSize
CreateSemaphoreW
GetSystemDefaultUILanguage
TlsSetValue
GetFileAttributesA
user32
TabbedTextOutW
UnregisterDeviceNotification
GetKeyboardLayoutNameW
CreateIcon
TrackPopupMenu
MapVirtualKeyA
PostThreadMessageA
IsCharAlphaNumericW
DdeCreateDataHandle
GetCapture
UnionRect
PostQuitMessage
DefWindowProcA
UserHandleGrantAccess
CreateIconIndirect
DdeImpersonateClient
NotifyWinEvent
SendMessageW
SetDlgItemInt
GetCaretPos
GetClassWord
ImpersonateDdeClientWindow
IMPGetIMEW
MessageBoxW
SetWindowLongW
CharLowerW
shlwapi
PathCombineA
PathAppendA
Sections
.text Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 336KB - Virtual size: 691KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ