Static task
static1
Behavioral task
behavioral1
Sample
729f88d229210c86f69f8718c6a891368fbcb30e8e0d380fbc1e8f9d29a2e351.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
729f88d229210c86f69f8718c6a891368fbcb30e8e0d380fbc1e8f9d29a2e351.exe
Resource
win10v2004-20220812-en
General
-
Target
729f88d229210c86f69f8718c6a891368fbcb30e8e0d380fbc1e8f9d29a2e351
-
Size
3.2MB
-
MD5
cb029e6b92cbd4b09b2b6957c24ebcf7
-
SHA1
0b950b75fa7f479bbdb8a98dc7e45b5420c882fe
-
SHA256
729f88d229210c86f69f8718c6a891368fbcb30e8e0d380fbc1e8f9d29a2e351
-
SHA512
197c05f3eb12f719c7795730576a66a0109d5c20b3a406ddbeabd01e213988d30e23305daa7b8b96c81c39941c48a62f320b26ca7b3929b51e2877b5b17ec5fa
-
SSDEEP
49152:lzt39+g8AnqHJde639+QGX5bp55TFeSv14bKmmtIF6Yj5UOJxP9Xx6:xHX5bz5TT14p6IFyWxP6
Malware Config
Signatures
Files
-
729f88d229210c86f69f8718c6a891368fbcb30e8e0d380fbc1e8f9d29a2e351.exe windows x86
f6c7535f935886e663294325cea579bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
Sleep
LoadLibraryA
GetProcAddress
FindResourceA
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetEnvironmentVariableA
MultiByteToWideChar
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
GetLastError
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
RaiseException
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
CompareStringA
CompareStringW
user32
MessageBoxA
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ