Static task
static1
Behavioral task
behavioral1
Sample
ce7f4b9c020f8a51361f9e44f5328923993020eaa990d6f74f020d1b3005733a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce7f4b9c020f8a51361f9e44f5328923993020eaa990d6f74f020d1b3005733a.exe
Resource
win10v2004-20221111-en
General
-
Target
ce7f4b9c020f8a51361f9e44f5328923993020eaa990d6f74f020d1b3005733a
-
Size
164KB
-
MD5
46b23166475988fd4185f11f9d867b87
-
SHA1
71bc466bf5bba6af22b5dae6523a64291eedd0d1
-
SHA256
ce7f4b9c020f8a51361f9e44f5328923993020eaa990d6f74f020d1b3005733a
-
SHA512
d08092ee670b399eee062ebc28ecca2fbbc1489f4bbd50297adf409be94a3ccb47ba071b7357bd2fe5ae463e0ebba452b961d3314ad926a065ad0a2f5788b2eb
-
SSDEEP
3072:CoGLLHyRZ3nIFrb1mB363ZXvozLvETq2QMSnK3haBwWzwR6dgR3OXnah:CoKyR9oEl63ZXw/E+2QMSnKaBwz6gIa
Malware Config
Signatures
Files
-
ce7f4b9c020f8a51361f9e44f5328923993020eaa990d6f74f020d1b3005733a.exe windows x86
ed54141024cafda6344b561cab46eab3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SetFilePointerEx
GetSystemTimeAsFileTime
CompareStringW
FindFirstFileA
ExpandEnvironmentStringsW
SystemTimeToFileTime
GetSystemTime
SetFileTime
SetEndOfFile
WriteFile
LocalFree
lstrlenA
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetFileSizeEx
FindClose
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetTempPathW
GlobalFree
GlobalAlloc
GetFileAttributesExW
CopyFileW
CreateHardLinkW
SetFileAttributesW
DeleteFileW
GetTempPathA
GetFileTime
FindNextFileW
GetStdHandle
GetCurrentThread
RemoveDirectoryW
FormatMessageA
GetComputerNameW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LoadLibraryA
HeapReAlloc
RtlUnwind
GetLocaleInfoA
HeapSize
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
user32
PeekMessageW
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
ole32
StgOpenStorageEx
oleaut32
GetActiveObject
SafeArrayGetRecordInfo
VarUI1FromDec
VariantInit
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ