Static task
static1
Behavioral task
behavioral1
Sample
8931a0feb6a547f117f1b300cbaecbb487810805de1bf383379f5c502925e752.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8931a0feb6a547f117f1b300cbaecbb487810805de1bf383379f5c502925e752.exe
Resource
win10v2004-20221111-en
General
-
Target
8931a0feb6a547f117f1b300cbaecbb487810805de1bf383379f5c502925e752
-
Size
93KB
-
MD5
c4532bc270cb87bfe9a572bd3c5f1a7d
-
SHA1
af920f4674e513312949fe0b1de483be175ad92d
-
SHA256
8931a0feb6a547f117f1b300cbaecbb487810805de1bf383379f5c502925e752
-
SHA512
4e2ba2adf9783f77dd2f104dd7a2797de44aa6558db53a9639ec522a1963cbaf2281d08be379e47624ad5024119c0a9a8d2e83a0d0b2f1d3cfc8dfd8f5f3395a
-
SSDEEP
1536:OAMc4IRsrr5oBdK5ap/qp4lQmowUFn3gJdP/TxBTCXM2yafz2Mncw2kHGKvRsxkq:vzkr5or1/vCmNUSL1BSM2qUc1Ap5sy1g
Malware Config
Signatures
Files
-
8931a0feb6a547f117f1b300cbaecbb487810805de1bf383379f5c502925e752.exe windows x86
503fca70c91e9e7bf9bd855c0a8b9b33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathW
GetTickCount
CreateMutexW
CloseHandle
ReleaseMutex
GetLastError
WaitForMultipleObjects
GetCurrentThreadId
ExitThread
DeleteFileW
GetModuleFileNameW
CreateProcessW
ResumeThread
Sleep
SuspendThread
SetEvent
GlobalMemoryStatus
GetSystemInfo
lstrcpyW
ExitProcess
GetComputerNameW
FreeLibrary
CreateThread
FindClose
FindNextFileW
FindFirstFileW
GetProcAddress
LoadLibraryW
GetCurrentProcessId
OpenMutexW
MultiByteToWideChar
WideCharToMultiByte
GetFileSize
CreateFileW
WriteFile
ReadFile
SetFilePointer
GetShortPathNameW
OpenEventW
CreateEventW
CreateSemaphoreW
OpenSemaphoreW
ReleaseSemaphore
GetVersionExW
WaitForSingleObject
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
SetEndOfFile
LoadLibraryA
RtlUnwind
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
HeapSize
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
InterlockedExchange
advapi32
GetUserNameW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode
RegSetValueExW
wininet
InternetQueryDataAvailable
InternetReadFile
HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetSetOptionW
InternetCloseHandle
InternetOpenW
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE