?SETCONFIG@@YAXXZ
Static task
static1
Behavioral task
behavioral1
Sample
86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7.exe
Resource
win10v2004-20220901-en
General
-
Target
86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7
-
Size
500KB
-
MD5
2464dc34168bf88b6d06bbdaf6bc94d0
-
SHA1
be5d3820d27656ae29c667495045c418cbc11c15
-
SHA256
86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7
-
SHA512
e2a4eb3373f181685aa23197d707e8491b82d6b4755098f3b3dff9c7b5bd5893321c542f6e7549b285a2675a3a122058368f2c7e4e4e8026cfc0c150e035c6e9
-
SSDEEP
12288:2edhKjQne2AG6aVi7JV8/efeRijqBqzItW:2efKjQnenaumefgTMa
Malware Config
Signatures
Files
-
86507a1310cb2f2258312c376850d17ba94c2aa26cfe6c86af2e7e3d1c94d3e7.exe windows x86
6aba08f1f52d2d19fb327cc3b6f6efb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetLocalTime
VirtualFree
SetThreadPriority
GetModuleHandleW
GetProcAddress
GetLastError
GetTickCount
VirtualAlloc
CloseHandle
CreateFileA
LoadLibraryA
Sleep
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
ExitProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
SetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
VirtualProtect
GetSystemInfo
VirtualQuery
user32
LoadBitmapA
SetFocus
gdi32
CreatePen
ole32
CoInitialize
ws2_32
select
winmm
mciSendCommandA
auxSetVolume
Exports
Exports
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INITV3 Size: 4KB - Virtual size: 45B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EPV Size: 4KB - Virtual size: 618B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xcode Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ