Static task
static1
Behavioral task
behavioral1
Sample
a68bf8ab6ec2672d65f05509766979120c7eef79a5958cc793a6924aba228c9b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a68bf8ab6ec2672d65f05509766979120c7eef79a5958cc793a6924aba228c9b.exe
Resource
win10v2004-20220812-en
General
-
Target
a68bf8ab6ec2672d65f05509766979120c7eef79a5958cc793a6924aba228c9b
-
Size
135KB
-
MD5
c4bae3dbc9d8de0ad80fc517aa81f928
-
SHA1
013f3a0572c0257610034adbf793da2f250a64a8
-
SHA256
a68bf8ab6ec2672d65f05509766979120c7eef79a5958cc793a6924aba228c9b
-
SHA512
cdf1bfb54647bc150e6e8119cac8a0209170f6be174f9e7ce9d773d253e8268d2493177828bd772525feb1b02289682ecda81907dbb6bbb3d7c5ef3ca95d296d
-
SSDEEP
3072:MrbU+Aptvwq8lS5hUMoLzz/7xaiVdB5ZEG:ybb8YOhYzT74+jIG
Malware Config
Signatures
Files
-
a68bf8ab6ec2672d65f05509766979120c7eef79a5958cc793a6924aba228c9b.exe windows x86
af7fd94167aed686d1bfd3fe22d20193
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
ExitProcess
CreateFileW
GetStartupInfoW
GetProcAddress
HeapAlloc
HeapFree
GetModuleHandleW
GetProcessHeap
GlobalAlloc
LoadLibraryW
CreateThread
GetFileAttributesW
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
GetLocaleInfoA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
GetVersionExA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
Sleep
TerminateProcess
user32
LoadIconW
EndPaint
DestroyWindow
EndDialog
TranslateAcceleratorW
LoadStringW
GetMessageW
PostQuitMessage
ShowWindow
DialogBoxParamW
CreateWindowExW
LoadCursorW
MessageBoxW
UpdateWindow
BeginPaint
AdjustWindowRect
TranslateMessage
DefWindowProcW
LoadAcceleratorsW
DispatchMessageW
RegisterClassExW
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ