Static task
static1
Behavioral task
behavioral1
Sample
afa3b967f4b5e66f9b68d75f33bcd154d055c605d25750b9e98bdb5ad2e62de5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
afa3b967f4b5e66f9b68d75f33bcd154d055c605d25750b9e98bdb5ad2e62de5.exe
Resource
win10v2004-20221111-en
General
-
Target
afa3b967f4b5e66f9b68d75f33bcd154d055c605d25750b9e98bdb5ad2e62de5
-
Size
158KB
-
MD5
e0670fb50b905e5006a231517989da21
-
SHA1
76f658e375edde6248aa7e5b0bab2597460c276e
-
SHA256
afa3b967f4b5e66f9b68d75f33bcd154d055c605d25750b9e98bdb5ad2e62de5
-
SHA512
89e06f92c8e1a297fd88a9373fb88dad6bf09a55f0f743e73239ecf0b91911c5892c4a3f8d9e2daa0c3fc4998fab24edc3a0e0bd9a3cc7c8a903da2ddde13945
-
SSDEEP
1536:qy7AJWpywPNVDINDp6cVeoWU86Y3N6U7ThxOA3gNxm:qy7aWpyMwD/VeA8PwU7T1Mx
Malware Config
Signatures
Files
-
afa3b967f4b5e66f9b68d75f33bcd154d055c605d25750b9e98bdb5ad2e62de5.exe windows x86
d1db309f735c987711e8d981f03b16ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
WriteFile
EnterCriticalSection
TerminateProcess
HeapAlloc
LocalAlloc
HeapDestroy
GetCommandLineW
UnhandledExceptionFilter
VirtualAlloc
InterlockedIncrement
GetVersionExA
VirtualAlloc
GetStartupInfoA
GetCurrentProcess
SetEvent
GetCurrentProcess
lstrcmpiW
WideCharToMultiByte
GetACP
LocalFree
InterlockedIncrement
LeaveCriticalSection
GetModuleHandleA
EnterCriticalSection
GetModuleHandleA
LoadLibraryW
SetUnhandledExceptionFilter
lstrcpyW
lstrlenW
LoadLibraryW
HeapDestroy
GetVersionExA
GetProcessHeap
WideCharToMultiByte
HeapAlloc
GetModuleHandleA
GetTickCount
GetStartupInfoA
VirtualFree
LoadLibraryA
LocalFree
GetCommandLineA
lstrcpyW
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoA
ExitProcess
lstrcpyW
ExitProcess
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE