Static task
static1
Behavioral task
behavioral1
Sample
918f496091874d451a93bc5537c40212f4e6f1bba68dc48e13efa58560c51218.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
918f496091874d451a93bc5537c40212f4e6f1bba68dc48e13efa58560c51218.exe
Resource
win10v2004-20221111-en
General
-
Target
918f496091874d451a93bc5537c40212f4e6f1bba68dc48e13efa58560c51218
-
Size
800KB
-
MD5
c449e687a88e8c8161302b0bf14ce10a
-
SHA1
9f7949427adb451756025a9efe076340dbf6fd7d
-
SHA256
918f496091874d451a93bc5537c40212f4e6f1bba68dc48e13efa58560c51218
-
SHA512
189d3c49d51328b3027172dab119f158238ada96fb9dec65adb78f2bf76b042481ba2e5d48d4b4b76717b4c43ce2901c5b9d716487a1a9b16efddf6619936daa
-
SSDEEP
24576:fPpi776lOgZPgtmRZH30+9lllllllDZJl:876U6gtqZEulllllllDl
Malware Config
Signatures
Files
-
918f496091874d451a93bc5537c40212f4e6f1bba68dc48e13efa58560c51218.exe windows x86
a4e68d5ceabd34bb8a0d303e5f4e2949
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
WriteConsoleW
GetCurrentThreadId
GetTickCount
CreateFileA
TlsSetValue
GetFileType
Sleep
VirtualFree
HeapCreate
LocalFree
HeapReAlloc
DuplicateHandle
GetSystemTimeAsFileTime
MulDiv
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetModuleHandleA
TlsFree
WideCharToMultiByte
CompareStringA
DeleteFileW
MultiByteToWideChar
SetErrorMode
UnhandledExceptionFilter
GetCurrentDirectoryA
LockResource
LocalAlloc
GetLocaleInfoA
GetEnvironmentStrings
GetStartupInfoA
GetModuleFileNameA
GetVersionExA
VirtualProtect
ExitProcess
IsDebuggerPresent
LCMapStringA
SetEvent
GetLastError
VirtualAlloc
HeapAlloc
GetProcessHeap
GetCommandLineA
GetVersion
GetProcAddress
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringW
user32
PostQuitMessage
KillTimer
DefWindowProcA
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
SetTimer
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadIconA
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 740KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE