Static task
static1
Behavioral task
behavioral1
Sample
1469fcc6a44ca3499f76c200ed4b2a62b427fbb32fb382e7215964d1166be0b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1469fcc6a44ca3499f76c200ed4b2a62b427fbb32fb382e7215964d1166be0b3.exe
Resource
win10v2004-20220812-en
General
-
Target
1469fcc6a44ca3499f76c200ed4b2a62b427fbb32fb382e7215964d1166be0b3
-
Size
36KB
-
MD5
e23574d349199d72fa2789ca4d504953
-
SHA1
b9a5d8b3ea8f40458aea91059402050c8b5595ac
-
SHA256
1469fcc6a44ca3499f76c200ed4b2a62b427fbb32fb382e7215964d1166be0b3
-
SHA512
f99f139425d780b6d12a07f9030ca5768ab8771a4b14417a2b9c4be64b6d6a6b4a824bb50a64641633e412a54d9337dd3bd101cd7af7e2d6a78e94d24e64afdd
-
SSDEEP
384:hLzlWpdKTXlQgkguFU2SlZzoIjTp7y9nDJChO2yo7DVMluFVtkN:llWp8TCgkguFK8nDwDjPVcQVtkN
Malware Config
Signatures
Files
-
1469fcc6a44ca3499f76c200ed4b2a62b427fbb32fb382e7215964d1166be0b3.exe windows x86
aa4e3bdf3d21fd520f61e6c8aae1c1a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
WriteFile
GetLastError
MultiByteToWideChar
lstrlenA
WinExec
GetCurrentThreadId
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WideCharToMultiByte
LocalFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
user32
GetMessageA
GetInputState
PostThreadMessageA
ole32
CoInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
oleaut32
SysFreeString
VariantClear
GetErrorInfo
SysAllocString
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE