Static task
static1
Behavioral task
behavioral1
Sample
b474f8b521a471685a447b5f97cf1e0a79e00517073186dc4ae378991e02ed25.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b474f8b521a471685a447b5f97cf1e0a79e00517073186dc4ae378991e02ed25.exe
Resource
win10v2004-20220901-en
General
-
Target
b474f8b521a471685a447b5f97cf1e0a79e00517073186dc4ae378991e02ed25
-
Size
256KB
-
MD5
c35a4a15207e50cb771739351fa4fe96
-
SHA1
110953d91f108ebdd983b9a403a22c7a0704a789
-
SHA256
b474f8b521a471685a447b5f97cf1e0a79e00517073186dc4ae378991e02ed25
-
SHA512
0e5218383d74a6373af1ff5c304d53a2c8b5c460aeb31249d0970f19ecff871dd02ec99df9dc8b91f60b8efc4258c5f1e2faddbbcbf6139ca17f72ee0743e79e
-
SSDEEP
6144:cFlA2N97nRX725rjoPjubP9V/rjvuiZHFR:cFlAc97nRrUrKjubFh3vtZHFR
Malware Config
Signatures
Files
-
b474f8b521a471685a447b5f97cf1e0a79e00517073186dc4ae378991e02ed25.exe windows x86
267412436a6c08a69b7278c0c2b811be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetSystemTimeAsFileTime
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
HeapReAlloc
HeapFree
GetLastError
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
GetCurrentProcess
VirtualAlloc
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
WideCharToMultiByte
GetTimeZoneInformation
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
InitializeCriticalSection
VirtualQuery
InterlockedExchange
GetCPInfo
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetACP
GetOEMCP
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ