Static task
static1
Behavioral task
behavioral1
Sample
929bb2eec7032b5de669c277717acb56bdd9d306141c4731d02eac93caadc1df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
929bb2eec7032b5de669c277717acb56bdd9d306141c4731d02eac93caadc1df.exe
Resource
win10v2004-20220812-en
General
-
Target
929bb2eec7032b5de669c277717acb56bdd9d306141c4731d02eac93caadc1df
-
Size
156KB
-
MD5
38740d5e471bd62aa7a2ee007554812d
-
SHA1
5ea9e93d3e46750772aa81a07dd1671f74b3029a
-
SHA256
929bb2eec7032b5de669c277717acb56bdd9d306141c4731d02eac93caadc1df
-
SHA512
f0e557bb75c9bde1361faa30a7d82f08ca1b6a013bf4e43a0a5923fcc3e3d370118084a812173364a97e9f36aeef798d420fb681bc926d776f4b433ded7c6f64
-
SSDEEP
3072:ulIqkCZZfnHrguRdnqB86S5lhowA/+JIgFosuxv:8mCr/H8a8Qo5+JlFosuxv
Malware Config
Signatures
Files
-
929bb2eec7032b5de669c277717acb56bdd9d306141c4731d02eac93caadc1df.exe windows x86
4a462a30323d0d79ea11f8d6a9fd21ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
CreateFileA
GetVolumeInformationA
GetSystemTime
OpenProcess
GetVersionExA
GetModuleHandleA
GetDateFormatA
LoadLibraryA
ExitProcess
WideCharToMultiByte
GetCurrentProcessId
GetModuleFileNameA
GetProfileStringW
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
LCMapStringA
GetSystemInfo
user32
LoadBitmapA
CheckDlgButton
SetWindowTextA
GetIconInfo
IsDialogMessageA
Sections
.text Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ