Static task
static1
Behavioral task
behavioral1
Sample
92c6ad88c0ec96a0b9e9c4d1ea2550d9ef9d1827deb41d6bf793bc6a55f48e9a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
92c6ad88c0ec96a0b9e9c4d1ea2550d9ef9d1827deb41d6bf793bc6a55f48e9a.exe
Resource
win10v2004-20220812-en
General
-
Target
92c6ad88c0ec96a0b9e9c4d1ea2550d9ef9d1827deb41d6bf793bc6a55f48e9a
-
Size
981KB
-
MD5
5f24925bd8b2c05f62903e7de4ef898e
-
SHA1
391b64b59fa06ba8d821a49f0838213bbfb14f0b
-
SHA256
92c6ad88c0ec96a0b9e9c4d1ea2550d9ef9d1827deb41d6bf793bc6a55f48e9a
-
SHA512
21042a90a85a699d4bb7e5ffcb1416a9bbd51575a6010168967d14d9077f21173280b2717268013974b3ac1025a9c122818a4b57b2e6ddaa519e194c996792e8
-
SSDEEP
12288:SAQDc00tOuRDIPtxfF958MOl8gH1gyDAcWf7kG49BmK00000rJ0B:NQDaEPtxn58PH1xDAmT9cW
Malware Config
Signatures
Files
-
92c6ad88c0ec96a0b9e9c4d1ea2550d9ef9d1827deb41d6bf793bc6a55f48e9a.exe windows x86
72eb845eabac859f28db760306ddf098
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
FindFirstFileA
GetShortPathNameA
GetFileAttributesA
GetFileType
GetFileSize
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapFree
GetProcAddress
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapAlloc
GetEnvironmentVariableA
Sleep
RaiseException
advapi32
RegLoadKeyA
RegQueryValueA
user32
DefWindowProcA
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
CreateWindowExA
RegisterClassA
IsIconic
ShowWindowAsync
BringWindowToTop
GetClientRect
GetSysColor
CloseWindow
MoveWindow
PostQuitMessage
Sections
.text Size: 888KB - Virtual size: 885KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE