Static task
static1
Behavioral task
behavioral1
Sample
90acba4f8be0485adef531b0f0057140e1743ba8ef15839eff2ac9552122c7fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90acba4f8be0485adef531b0f0057140e1743ba8ef15839eff2ac9552122c7fb.exe
Resource
win10v2004-20220812-en
General
-
Target
90acba4f8be0485adef531b0f0057140e1743ba8ef15839eff2ac9552122c7fb
-
Size
181KB
-
MD5
f7fd6fd6ba5228b5df70bb72832916f9
-
SHA1
5ac9e3f5f3d05cbc17e2cd925ae21cf0505f55b3
-
SHA256
90acba4f8be0485adef531b0f0057140e1743ba8ef15839eff2ac9552122c7fb
-
SHA512
52df84e69c93209dd5cb05e80ac10cc76ca9a5afc4f6371e65f9b791d66316cd53d34a6f3f4f8d8c4f6d84373cefc6f1f3c3da46f2eb2f5f99afcd9376961799
-
SSDEEP
3072:I7QKND7PJRnYsf7L/CigEp0ng0WB+Mu8to9x9S+EWZcxWIdDDm443d:iQSD7hRnYsfPgEWKlWZVQK
Malware Config
Signatures
Files
-
90acba4f8be0485adef531b0f0057140e1743ba8ef15839eff2ac9552122c7fb.exe windows x86
2c712cb412cbeb1dab0edcb24fe49b05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
QueryPerformanceCounter
GetSystemTime
GetLocalTime
CreateFileW
MoveFileExA
GetDateFormatA
FreeResource
FindResourceA
LoadResource
SetEvent
WaitForSingleObject
GetCurrentProcess
GetTempPathW
LoadLibraryW
HeapValidate
HeapReAlloc
HeapAlloc
HeapCreate
HeapFree
GetFileAttributesW
SetFileAttributesA
RemoveDirectoryW
MoveFileW
FindNextFileW
FindFirstFileW
TlsGetValue
TlsAlloc
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
WriteConsoleW
GetStartupInfoA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
ws2_32
accept
bind
closesocket
connect
gethostbyaddr
socket
ioctlsocket
listen
ntohl
inet_ntoa
select
recv
send
inet_addr
msvcr71
time
_controlfp
_onexit
__dllonexit
__p__fmode
__p__commode
_adjust_fdiv
_except_handler3
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
fopen
memmove
strchr
atoi
wcslen
exit
fseek
strncmp
fclose
fread
__set_app_type
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ