Static task
static1
Behavioral task
behavioral1
Sample
c537bf222725c179295e44832f58b2873714e7dd56d9167c260954bfde5d3657.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c537bf222725c179295e44832f58b2873714e7dd56d9167c260954bfde5d3657.exe
Resource
win10v2004-20220812-en
General
-
Target
c537bf222725c179295e44832f58b2873714e7dd56d9167c260954bfde5d3657
-
Size
2.1MB
-
MD5
267a74a36f7f42a4d54e34ff0c29fcd9
-
SHA1
bff6596bf8e1873e0cf09c9dbbfbe1ae7a204ac4
-
SHA256
c537bf222725c179295e44832f58b2873714e7dd56d9167c260954bfde5d3657
-
SHA512
c179fc653bc359ab0d6801f5c1db6cba06d8833ff2afe8b495a27bea27a893c8b0dc53cff6238b3ff43d32dad3b0793a60cce2320df81084e458674ef707cfc0
-
SSDEEP
24576:b9rJ2u9jzFiRKDp7bGTLaEXwuRVY4W1wk9N9TnzC7c31qtrJO80zJgaIraLZwTTg:DR7cHtwAON4ra1oMFCSVBKUIw
Malware Config
Signatures
Files
-
c537bf222725c179295e44832f58b2873714e7dd56d9167c260954bfde5d3657.exe windows x86
d718f99034da0e9eec76da7f8a0780f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
FindResourceA
WaitForSingleObject
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
ReadFile
IsBadCodePtr
IsBadReadPtr
GetOEMCP
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
user32
PeekMessageA
GetDesktopWindow
GetWindowRect
GetWindowThreadProcessId
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ