Static task
static1
Behavioral task
behavioral1
Sample
91063f2ee0ad4c944ee5ba8a2591c64382852f00b5026468e57610d58393559b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91063f2ee0ad4c944ee5ba8a2591c64382852f00b5026468e57610d58393559b.exe
Resource
win10v2004-20220812-en
General
-
Target
91063f2ee0ad4c944ee5ba8a2591c64382852f00b5026468e57610d58393559b
-
Size
256KB
-
MD5
929e94791efba38ae7e231ca8a6ef667
-
SHA1
2e1e3c304856d7db9b80406a48bf5ab6e93e636d
-
SHA256
91063f2ee0ad4c944ee5ba8a2591c64382852f00b5026468e57610d58393559b
-
SHA512
703d49879ccb1cec565c200a07d3d1c78bc39889c765d97a15422d144a5401647c83cb549f360d772432388f4f585251c45fa699dbc744f200e445b7674b9ef2
-
SSDEEP
3072:8ytCmYoSCKsRdsqs2kpinXzlWSg7sgHnu2cYeK:9Iss/2NY3sgHu2
Malware Config
Signatures
Files
-
91063f2ee0ad4c944ee5ba8a2591c64382852f00b5026468e57610d58393559b.exe windows x86
07e41296c04697ba94cc81558c4fe8cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
HeapAlloc
HeapReAlloc
SizeofResource
LoadResource
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSection
Sleep
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapSize
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetCursorPos
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ