Static task
static1
Behavioral task
behavioral1
Sample
202bb667aec1a62b88b364dbad41c09d164e79b32a5f1823a633ced8bf9fd677.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
202bb667aec1a62b88b364dbad41c09d164e79b32a5f1823a633ced8bf9fd677.exe
Resource
win10v2004-20220901-en
General
-
Target
202bb667aec1a62b88b364dbad41c09d164e79b32a5f1823a633ced8bf9fd677
-
Size
918KB
-
MD5
7500401571915dbba590ebf8c4f5cba0
-
SHA1
88a67d4db4205fb5b63f796be56da4dd898160ed
-
SHA256
202bb667aec1a62b88b364dbad41c09d164e79b32a5f1823a633ced8bf9fd677
-
SHA512
f8d996850925fa5e5503c2faf736b60a4c42ed9a0346c84b6ccc4c00e76fbfc6bae4dbd2506dd41c59bcbca5b9367aa9a6b7e9874d9fb530abe4ba9b8a5f56e9
-
SSDEEP
1536:i4OObhOhTPs3mK+rOMRsngTMj5qwYpslkOXoicUb:i4zbhWleMQyMtVSslZXoi9
Malware Config
Signatures
Files
-
202bb667aec1a62b88b364dbad41c09d164e79b32a5f1823a633ced8bf9fd677.exe windows x86
e9778771455ad69c5409dc9bd1b411fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
IsBadWritePtr
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 732KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE