Static task
static1
Behavioral task
behavioral1
Sample
415dd74e4b580cb4a4aacc78c13fc96bf47db97a66346aa7d991190450b1904a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
415dd74e4b580cb4a4aacc78c13fc96bf47db97a66346aa7d991190450b1904a.exe
Resource
win10v2004-20221111-en
General
-
Target
415dd74e4b580cb4a4aacc78c13fc96bf47db97a66346aa7d991190450b1904a
-
Size
144KB
-
MD5
8d05ffeecead55128959defffd6d59c1
-
SHA1
ac3227d747fc9f53ec8019dd05dfad93375c538b
-
SHA256
415dd74e4b580cb4a4aacc78c13fc96bf47db97a66346aa7d991190450b1904a
-
SHA512
61f9fdc9915f717a058d38236ba3bdd468e2766ddc6c639f635dfb03576f125ebc87367e775eb07f357292d836b1b4eda6d36b93a498f8eeb68d31de91820cd5
-
SSDEEP
3072:GJWx4DRMY74LLXIghvFSsUz7B6wyKY9e4pNXy:txY74gYdLE64U1pNi
Malware Config
Signatures
Files
-
415dd74e4b580cb4a4aacc78c13fc96bf47db97a66346aa7d991190450b1904a.exe windows x86
32132d460e1662261da0070ee4e728ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
WaitForSingleObject
GetCurrentProcessId
LoadLibraryW
CreateEventW
CreateThread
OutputDebugStringA
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentThread
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetFilePointer
LocalAlloc
IsBadReadPtr
IsBadWritePtr
HeapDestroy
FreeEnvironmentStringsA
GetEnvironmentStrings
LCMapStringA
VirtualQuery
IsDBCSLeadByte
IsBadCodePtr
GetSystemDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
GetStartupInfoA
msi
ord204
msvcrt
abs
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
strlen
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
_initterm
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ