Static task
static1
Behavioral task
behavioral1
Sample
f95c25a801134955b7d0dc04275f09753e034ea1229d4aeca6a62babb84acd03.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f95c25a801134955b7d0dc04275f09753e034ea1229d4aeca6a62babb84acd03.exe
Resource
win10v2004-20221111-en
General
-
Target
f95c25a801134955b7d0dc04275f09753e034ea1229d4aeca6a62babb84acd03
-
Size
372KB
-
MD5
02bbc0b1d040c73966e3a5abbe249ed2
-
SHA1
3a60cf5b4158dc8b4eb01201f55caa930d662dfc
-
SHA256
f95c25a801134955b7d0dc04275f09753e034ea1229d4aeca6a62babb84acd03
-
SHA512
293029b919db7e6be1a933473361d14d2711f21b76e1ebc1d6cd944b76e0cd09f1a298ef364a63ba3de06a4c2d791e0f6fa9ea4a22fc9a3be59e4a41ae146e92
-
SSDEEP
6144:xUEs9eb8AQDCwb00b0Gk4hj+uh4W+Vwi/u3Diq0AVnxFjurm9iyChwL:xsiwJ5hbmxl/Iuq1nXjymvAw
Malware Config
Signatures
Files
-
f95c25a801134955b7d0dc04275f09753e034ea1229d4aeca6a62babb84acd03.exe windows x86
19c12fbed5a3c5b3a04354b1cb5c8c53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleInitialize
CoInitialize
CoRevokeClassObject
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
kernel32
InterlockedIncrement
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
CreateEventW
FileTimeToLocalFileTime
GetVersion
InterlockedExchange
LoadLibraryW
ExitProcess
GetFileTime
GetModuleFileNameW
RemoveDirectoryW
TlsAlloc
PrepareTape
GetVolumeInformationW
FindNextChangeNotification
FindFirstChangeNotificationW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
HeapSize
GetLocaleInfoA
GetLocaleInfoW
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ