Static task
static1
Behavioral task
behavioral1
Sample
79e9a65b539431bd649a0eb031936630da3df166db40136ebd23e3ea87444b9d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79e9a65b539431bd649a0eb031936630da3df166db40136ebd23e3ea87444b9d.exe
Resource
win10v2004-20220901-en
General
-
Target
79e9a65b539431bd649a0eb031936630da3df166db40136ebd23e3ea87444b9d
-
Size
358KB
-
MD5
f10c55f24ce3de24db11d37faf8c04b3
-
SHA1
c1a0371df52d2da2549b6ef2b1377d048e4e4e81
-
SHA256
79e9a65b539431bd649a0eb031936630da3df166db40136ebd23e3ea87444b9d
-
SHA512
3433640ec979972c167bb092587e8cd61e9877502832c5736b7ed270da635acab73ccf69824cfb3e6a6fae35dd0b8779d1725630210f4fb76437692096128f8f
-
SSDEEP
6144:KcQlV74Rjrdtw3JkyfY1lckoCnQbbtIgjhKw07cbPEWJgL4G:RqGexUck1QHiekw04A
Malware Config
Signatures
Files
-
79e9a65b539431bd649a0eb031936630da3df166db40136ebd23e3ea87444b9d.exe windows x86
dd8f1bc224db35c81bd5d03e48e23a0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetCurrentProcessId
VirtualAlloc
GetCurrentThread
GetCurrentThreadId
ExitProcess
CreateFileA
SetEndOfFile
GetFileType
Sleep
TlsGetValue
FindClose
GlobalAlloc
CreateFileW
LoadResource
InitializeCriticalSection
WriteConsoleA
LCMapStringA
TerminateProcess
LocalFree
SetEnvironmentVariableA
GetModuleHandleW
GetSystemDirectoryA
FindFirstFileW
GetSystemTimeAsFileTime
MulDiv
GetCurrentProcess
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetModuleHandleA
GetStringTypeA
MapViewOfFile
CreateThread
GetProcessHeap
InterlockedCompareExchange
GetProcAddress
FreeEnvironmentStringsW
GetStartupInfoW
WideCharToMultiByte
UnhandledExceptionFilter
GetCPInfo
lstrlenW
LocalAlloc
GetConsoleMode
GetStartupInfoA
DeleteCriticalSection
GetLocalTime
GetACP
LoadLibraryA
FlushFileBuffers
TlsAlloc
HeapAlloc
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
lstrcmpiA
lstrlenA
GetSystemInfo
ReleaseMutex
LCMapStringW
GetStdHandle
GetLastError
GetCommandLineA
GetVersion
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
TlsSetValue
SetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
HeapReAlloc
MultiByteToWideChar
GetStringTypeW
user32
GetDC
EndDialog
InvalidateRect
EndPaint
GetParent
ReleaseDC
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE