Static task
static1
Behavioral task
behavioral1
Sample
a881f31e2ce719436af070de847d366ed701a026942acf33cb1d48d94417cefc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a881f31e2ce719436af070de847d366ed701a026942acf33cb1d48d94417cefc.exe
Resource
win10v2004-20220812-en
General
-
Target
a881f31e2ce719436af070de847d366ed701a026942acf33cb1d48d94417cefc
-
Size
156KB
-
MD5
231ee9188f32e5645ed3e4081a51f8c0
-
SHA1
c8e61ae2ea5f7b5545b4dae762794ec81c5ec8ed
-
SHA256
a881f31e2ce719436af070de847d366ed701a026942acf33cb1d48d94417cefc
-
SHA512
6832eb11bb43ec2a308df6e72a8c09426201fc9b5b37595dd87d4ceaabe4910cb23b1e0560390318a583fb194b9cbf68d8226861ab8f724fe778e3632222f0ad
-
SSDEEP
1536:+Eax2r/kCT9Qt87i6sgW1WySoCV+SSyBsyigchk/Tx6ebT22E6QKLFoc+7UAN4Gt:+sCtzWlrpSyyyohk/I6TbEBMoQw4Gt
Malware Config
Signatures
Files
-
a881f31e2ce719436af070de847d366ed701a026942acf33cb1d48d94417cefc.exe windows x86
d894a6e989673de8a19fc742ad612f38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
GetThreadPriority
GetCurrentThread
GetTickCount
GetFileSize
GlobalAlloc
CreateFileA
GetModuleFileNameA
GetEnvironmentVariableA
GetCommandLineA
GetVersionExA
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
LoadCursorA
RegisterClassA
LoadIconA
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ