Static task
static1
Behavioral task
behavioral1
Sample
102814018e47ebd9b714c1ada3973d32f928e11e1d6cbb85b925df41fef27595.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
102814018e47ebd9b714c1ada3973d32f928e11e1d6cbb85b925df41fef27595.exe
Resource
win10v2004-20221111-en
General
-
Target
102814018e47ebd9b714c1ada3973d32f928e11e1d6cbb85b925df41fef27595
-
Size
4.1MB
-
MD5
bfb616f253f4689c63364ee5e44c7d6b
-
SHA1
c264122f68c673f3ded50e5eec8a445b839f3b55
-
SHA256
102814018e47ebd9b714c1ada3973d32f928e11e1d6cbb85b925df41fef27595
-
SHA512
7782959f077a2b3e16de44125aa19b8bb91e2a92f5cc0b07f560b6e945fe99de2d99fe86656ffca1679a80c8acbde20c31a4efb79557bacd32637bb6ea789a45
-
SSDEEP
98304:TxUjAGvQBn3QHDhOVHwdzLKjHz2Mz32AK9onNt3dL04:Tx7Ycqh8HwdajT2Mz2d9uJ
Malware Config
Signatures
Files
-
102814018e47ebd9b714c1ada3973d32f928e11e1d6cbb85b925df41fef27595.exe windows x86
a81db344fd4cc78a0d64900a89d98820
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
CreateEventW
GetStringTypeW
GetEnvironmentStrings
ReleaseMutex
FormatMessageW
TlsGetValue
CreateFileW
GetCurrentThread
GetSystemTimeAsFileTime
GetModuleHandleA
GetModuleFileNameA
LoadLibraryExW
HeapFree
GetLocalTime
GetStartupInfoA
DeleteCriticalSection
TlsFree
LeaveCriticalSection
CloseHandle
GetVersionExA
GetACP
LoadLibraryA
GetOEMCP
GetLocaleInfoA
CreateFileA
FlushFileBuffers
GetModuleHandleW
SetConsoleCP
HeapCreate
AddAtomA
VirtualQuery
OpenEventA
_lopen
InterlockedCompareExchange
CreateEventA
user32
MsgWaitForMultipleObjects
PostMessageA
SetWindowLongW
GetWindowThreadProcessId
GetSystemMetrics
ReleaseCapture
FillRect
SetTimer
BeginPaint
GetForegroundWindow
gdi32
SetBrushOrgEx
PatBlt
PlayMetaFile
CloseMetaFile
advapi32
CryptDecrypt
SetServiceStatus
CryptDeriveKey
RegOpenKeyW
RegisterEventSourceW
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ