Static task
static1
Behavioral task
behavioral1
Sample
316e7643b6a589e88f43fdb61921b3229ff51da895be02e49fb7eebad7509362.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
316e7643b6a589e88f43fdb61921b3229ff51da895be02e49fb7eebad7509362.exe
Resource
win10v2004-20220901-en
General
-
Target
316e7643b6a589e88f43fdb61921b3229ff51da895be02e49fb7eebad7509362
-
Size
432KB
-
MD5
01e17cd009a9f45424129adda0d46990
-
SHA1
3e4a3fa212f1718ae15a33d117be2c9a7a99f1ab
-
SHA256
316e7643b6a589e88f43fdb61921b3229ff51da895be02e49fb7eebad7509362
-
SHA512
7cd22a0b8c39b97ce4ee993b3e627a9a4c905aee84b2d690de64e4cc9fb823a0c8be2433af6e66e05869c46c0318a90dd46bc0f603d4434c92e929f38dfb95fb
-
SSDEEP
3072:iZCTuq7XXZibXYoapf4FW72OupwVGfI9XEhCNIBfx5fEnvG5wol4crRA3h:K8XZikoad0TI90hCCBfz4/crR
Malware Config
Signatures
Files
-
316e7643b6a589e88f43fdb61921b3229ff51da895be02e49fb7eebad7509362.exe windows x86
64e1838c29bcac963ff7d8d250f92757
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
CloseHandle
GetExitCodeThread
OutputDebugStringA
WriteFile
CreateThread
Sleep
ReadFile
WideCharToMultiByte
FlushFileBuffers
SetStdHandle
ReleaseMutex
SetFilePointer
LoadLibraryA
GetOEMCP
GetACP
VirtualQuery
GetSystemInfo
VirtualProtect
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
WaitForSingleObject
GetSystemDirectoryA
MultiByteToWideChar
InitializeCriticalSection
LeaveCriticalSection
GetLocaleInfoW
EnterCriticalSection
IsBadCodePtr
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
DeleteCriticalSection
RtlUnwind
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
IsBadReadPtr
ExitProcess
HeapAlloc
LCMapStringA
GetLastError
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
user32
WinHelpA
LoadStringA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadImageA
GetDC
ReleaseDC
SetWindowTextA
GetWindowLongA
wsprintfA
CreateDialogParamA
ShowWindow
GetDlgItem
EnableWindow
SetWindowLongA
EndDialog
gdi32
GetObjectA
SelectObject
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
winspool.drv
OpenPrinterA
GetPrinterDataA
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ