Static task
static1
Behavioral task
behavioral1
Sample
615dc3b9493d41b995284a23a0d36b17e33ef54271ae8c337b1fb966bca92e94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
615dc3b9493d41b995284a23a0d36b17e33ef54271ae8c337b1fb966bca92e94.exe
Resource
win10v2004-20220901-en
General
-
Target
615dc3b9493d41b995284a23a0d36b17e33ef54271ae8c337b1fb966bca92e94
-
Size
380KB
-
MD5
dea9cf434b4a8fa04a5495978cbb34c5
-
SHA1
9313b0f9201537f78e9fe53b6e93f61c0a0f33c7
-
SHA256
615dc3b9493d41b995284a23a0d36b17e33ef54271ae8c337b1fb966bca92e94
-
SHA512
c61e9700a937d562970e2e9527e6e0631b74cf7fa99a50ed6e3379e8ca1b40580d3c9c0d52e2c3412a8e904c0add28cdf8b8e0d476ed2fd1fd268611b6b1a963
-
SSDEEP
6144:EBRWCWx5rbtv245NHWHEW8G9blF6tfzHQjoOinK/cp8XiYtDZxdOasKMB3nq5:EzV65rNNHWkWNs5ltKTXtDEYMB3nq
Malware Config
Signatures
Files
-
615dc3b9493d41b995284a23a0d36b17e33ef54271ae8c337b1fb966bca92e94.exe windows x86
2a1337f300b86329014cee7dd571b012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
sensapi
IsDestinationReachableW
sfc
SfcIsFileProtected
kernel32
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
Sleep
CreateProcessW
CloseHandle
GetStartupInfoW
CopyFileW
GetTickCount
CreateEventW
FileTimeToLocalFileTime
GetVersion
InterlockedExchange
CreateDirectoryW
DeleteFileW
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
SetSystemTimeAdjustment
GetSystemDirectoryW
OpenMutexW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetLocaleInfoA
GetLocaleInfoW
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ