Static task
static1
Behavioral task
behavioral1
Sample
747f82e00c52b445ae51be1a40078a75abf2e2bead4bfa7d4bd9566d2797f957.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
747f82e00c52b445ae51be1a40078a75abf2e2bead4bfa7d4bd9566d2797f957.exe
Resource
win10v2004-20220812-en
General
-
Target
747f82e00c52b445ae51be1a40078a75abf2e2bead4bfa7d4bd9566d2797f957
-
Size
288KB
-
MD5
29773deb9fc8e3998358bba290ea05d6
-
SHA1
259906c2b63638e0b6504b763b300908a11a2470
-
SHA256
747f82e00c52b445ae51be1a40078a75abf2e2bead4bfa7d4bd9566d2797f957
-
SHA512
0fb2c4d6de3d3451d43fd8db1b54a255eb139f3f2b373643c4bd6694ca68063a4f218decb773b5860146414c10ae6a7e46282a6408611972a1072b469b9bd936
-
SSDEEP
6144:Jorh5S9aY5dJwu01jZqFlz+qq/rjME40o3cK90qf:JabSH/aqvVqjjMyoMKWqf
Malware Config
Signatures
Files
-
747f82e00c52b445ae51be1a40078a75abf2e2bead4bfa7d4bd9566d2797f957.exe windows x86
19c4e10940e6bed5ef9618b29a63db20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetModuleHandleW
ExitProcess
GetProcAddress
GetModuleHandleA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
RtlUnwind
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
icm32
ord15
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ