Static task
static1
Behavioral task
behavioral1
Sample
41874c7c31b9e88ed020a4197eb3f3c08f708f969bc1b8c647b989f584456092.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
41874c7c31b9e88ed020a4197eb3f3c08f708f969bc1b8c647b989f584456092.exe
Resource
win10v2004-20220812-en
General
-
Target
41874c7c31b9e88ed020a4197eb3f3c08f708f969bc1b8c647b989f584456092
-
Size
5.0MB
-
MD5
cc70fa37ff4c1c0fbb9ce91878a0bbb2
-
SHA1
f13553c88289ecdaa4fc813e7dae58b0c069c8ec
-
SHA256
41874c7c31b9e88ed020a4197eb3f3c08f708f969bc1b8c647b989f584456092
-
SHA512
93ecd463ca03e5dccf616c921ff6b732371b059e248b0d7623ee8a92cbdd56f612745ec5b102211b1556a347e8b3d8eb03f809d83a1a1cbb0ce1f7301b87bd6b
-
SSDEEP
98304:/xUjAENQKhhilPVXT8yfhJInnKECjt1avKIiHP6tEwQqgbF07/OxPJb:/x7kphh2PZvJInJGraoiEiDDOdZ
Malware Config
Signatures
Files
-
41874c7c31b9e88ed020a4197eb3f3c08f708f969bc1b8c647b989f584456092.exe windows x86
fa6f2e3c2401d6c3611fac9511f7c373
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
HeapDestroy
GlobalFree
InterlockedIncrement
UnmapViewOfFile
InitializeCriticalSection
GetStringTypeA
GetVersionExW
InterlockedCompareExchange
FormatMessageW
TlsFree
HeapAlloc
CreateFileA
WriteFile
GetStringTypeW
SetLastError
GetEnvironmentStrings
IsDebuggerPresent
GetCurrentProcess
SetUnhandledExceptionFilter
GetCurrentProcessId
LoadResource
SetConsoleCP
HeapCreate
AddAtomA
VirtualQuery
OpenEventA
_lopen
GetLocaleInfoA
CreateEventA
user32
ShowWindow
EnableWindow
CharNextA
CharUpperW
DestroyIcon
LoadStringA
DestroyMenu
GetDlgItem
SetFocus
TranslateMessage
GetForegroundWindow
gdi32
CreateDIBitmap
GetTextAlign
CreateCompatibleDC
AbortDoc
GetViewportExtEx
DeleteMetaFile
advapi32
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptDestroyKey
RegSetValueExW
Sections
.text Size: 3.9MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ