Static task
static1
Behavioral task
behavioral1
Sample
30687c63253d506c84fa053ed2ef450780d6defa349a99a4ab0f2c28ece25486.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
30687c63253d506c84fa053ed2ef450780d6defa349a99a4ab0f2c28ece25486.exe
Resource
win10v2004-20220812-en
General
-
Target
30687c63253d506c84fa053ed2ef450780d6defa349a99a4ab0f2c28ece25486
-
Size
856KB
-
MD5
06f237e85ccb8a2324deb2cdd0360790
-
SHA1
41e8c36ae8dccb3b3e224f02cdcd0f6c1aac5896
-
SHA256
30687c63253d506c84fa053ed2ef450780d6defa349a99a4ab0f2c28ece25486
-
SHA512
c4533a063f6cee6fbb92dbc4ce8241f31c06eb47c433dec59195e9538d92a3e8f33d254fea9838192298a5254097045f08e8f10acf664e11b4763fea76198ede
-
SSDEEP
24576:hxOf3WWatC2/wU97zFmUcVWPrNKy/LzR3JbsZi/qSI:63WW2I2tmPVWoG7o0/
Malware Config
Signatures
Files
-
30687c63253d506c84fa053ed2ef450780d6defa349a99a4ab0f2c28ece25486.exe windows x86
93fd0515c5e13f81dc96d6ce1841c525
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
GetLocaleInfoW
SetCurrentDirectoryA
FlushFileBuffers
DeleteCriticalSection
GetVersionExA
FileTimeToSystemTime
GetFileAttributesA
TlsFree
GetCurrentProcess
SetEndOfFile
FindFirstFileA
GetTickCount
WriteFile
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableW
HeapFree
CreateThread
MultiByteToWideChar
GetFileType
HeapReAlloc
GetExitCodeThread
HeapAlloc
FindClose
GetFullPathNameA
TerminateProcess
ExitThread
SetEnvironmentVariableA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentDirectoryA
EnterCriticalSection
FindNextFileA
SetLastError
GetStartupInfoA
ExitProcess
LeaveCriticalSection
WideCharToMultiByte
GetCurrentProcessId
GetStdHandle
GetCurrentThreadId
SetHandleCount
FileTimeToLocalFileTime
GetLocaleInfoA
CloseHandle
ReadFile
ole32
CoInitialize
CoUninitialize
ntdll
tolower
msvcrt
gmtime
puts
printf
time
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 736KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ