Static task
static1
Behavioral task
behavioral1
Sample
440b5ef67233bf89d7831ab3e60499eeab7717962048bca07436086ea700c3f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
440b5ef67233bf89d7831ab3e60499eeab7717962048bca07436086ea700c3f8.exe
Resource
win10v2004-20221111-en
General
-
Target
440b5ef67233bf89d7831ab3e60499eeab7717962048bca07436086ea700c3f8
-
Size
161KB
-
MD5
7b76066b921c1ea3a7a74501e481ec57
-
SHA1
ae06292cf80ec81fa758c8e1127557c883149f6f
-
SHA256
440b5ef67233bf89d7831ab3e60499eeab7717962048bca07436086ea700c3f8
-
SHA512
9a1a54b804230c4a968fb5099d42700ce62a140d01d4d68baf8bd77fe1965c589dfd0a808ff86c47aa3c2c1843a9782d0191088603d7ec60a32707426d3b5b79
-
SSDEEP
3072:Blri4JUu0IX1kOVv6EH8O+/WM2RlgSulgX9GGOUUzG1fMK0l/N8:Blri4au0U1D16EH5+/WTRlgSus9HOUPT
Malware Config
Signatures
Files
-
440b5ef67233bf89d7831ab3e60499eeab7717962048bca07436086ea700c3f8.exe windows x86
b0db0c86db2ec20b6a393d6dda713506
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileExA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
user32
PeekMessageW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
StgOpenStorageEx
oleaut32
GetActiveObject
SafeArraySetRecordInfo
VarI1FromDec
VariantInit
Sections
.text Size: 91KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ