Static task
static1
Behavioral task
behavioral1
Sample
92c976a7ee8c2afd9e8643ce0dfd4e9606cf235f01651d6c788b604bb4cc5fc2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92c976a7ee8c2afd9e8643ce0dfd4e9606cf235f01651d6c788b604bb4cc5fc2.exe
Resource
win10v2004-20221111-en
General
-
Target
92c976a7ee8c2afd9e8643ce0dfd4e9606cf235f01651d6c788b604bb4cc5fc2
-
Size
114KB
-
MD5
662c6e9c063c1b4649aee34cde9ebaf1
-
SHA1
bb2d7e56a6926b8e21044f4d0b036ad2e8b9b968
-
SHA256
92c976a7ee8c2afd9e8643ce0dfd4e9606cf235f01651d6c788b604bb4cc5fc2
-
SHA512
260fffa8a873c1a41114f776092192ee416bdd87ad1d072ea50128a80cefab32a6e0579984a30192ebf989a72ea0dd11a47d7e62ee04de9ffce588774ece5fa1
-
SSDEEP
3072:a5L3OsRzXDtEOA6jf+qOfsMQEktBjtQ2Bt:6L3TGOLzZOEM6PJjb
Malware Config
Signatures
Files
-
92c976a7ee8c2afd9e8643ce0dfd4e9606cf235f01651d6c788b604bb4cc5fc2.exe windows x86
cc824ab631daee89da368762593c7677
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
LoadLibraryW
GetSystemTime
CreateFileW
VirtualAlloc
GetModuleFileNameW
HeapFree
HeapAlloc
GetStartupInfoW
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wds Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ