Static task
static1
Behavioral task
behavioral1
Sample
455294a59ef33e45729d809d666356cbe3b5ab1471d13e559f497c2b7238265a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
455294a59ef33e45729d809d666356cbe3b5ab1471d13e559f497c2b7238265a.exe
Resource
win10v2004-20220812-en
General
-
Target
455294a59ef33e45729d809d666356cbe3b5ab1471d13e559f497c2b7238265a
-
Size
160KB
-
MD5
72895215bfdc55313e32b1d80616d92b
-
SHA1
2910b46cd1cf42db37bcab214e830e047ce8d5ff
-
SHA256
455294a59ef33e45729d809d666356cbe3b5ab1471d13e559f497c2b7238265a
-
SHA512
f1014267de8a08b5eae3790aae7477670dd3a7006cb9b6f2b6c1f6e8bf2da201a7fe46e7cf6f047f693675e34a7f0a4839fb855cc73255ef5d3b751b65736534
-
SSDEEP
3072:bJYJDZ9OxZN54ZHohJSMIQTxlHpah4vV+0NPMw86JnpgDeldkianxnIay3YStcu6:x/WxIauBVFKep5
Malware Config
Signatures
Files
-
455294a59ef33e45729d809d666356cbe3b5ab1471d13e559f497c2b7238265a.exe windows x86
815829821a6d9872d01ca43195d6e713
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
CloseHandle
WriteFile
CreateFileA
CopyFileA
DeleteFileA
WaitForSingleObject
CreateProcessA
LockResource
LoadResource
SizeofResource
FindResourceA
SetFileTime
GetFileTime
GetWindowsDirectoryA
UnhandledExceptionFilter
GetModuleFileNameA
LCMapStringW
LoadLibraryA
GetProcAddress
RaiseException
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetUnhandledExceptionFilter
HeapDestroy
GetSystemDirectoryA
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetFileType
LCMapStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
RtlUnwind
IsBadCodePtr
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
InternetQueryDataAvailable
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ