Static task
static1
Behavioral task
behavioral1
Sample
33a6b6db211ed57362207188c91912b677ca1b4e3d73b062d413a21dcae9e3db.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
33a6b6db211ed57362207188c91912b677ca1b4e3d73b062d413a21dcae9e3db.exe
Resource
win10v2004-20220901-en
General
-
Target
33a6b6db211ed57362207188c91912b677ca1b4e3d73b062d413a21dcae9e3db
-
Size
54KB
-
MD5
6b72bb32cce32c2e0b3f5f598c1f404e
-
SHA1
6363d361279ee7d7353a3e66f62d1293aaaf69e9
-
SHA256
33a6b6db211ed57362207188c91912b677ca1b4e3d73b062d413a21dcae9e3db
-
SHA512
d71cb6402683cd4fb66dc6133bac82b7cc2bf74367fbe9bb0558ae0d6e5c915311040859e2b942bd3adbac83b2337248aa229b3c09a0024b06acf3f24206b4a7
-
SSDEEP
1536:R13I78fxVgKb2nsAX1MXWLb+Qlz7icqwyy:P5Z2sAFMXC3zOcqVy
Malware Config
Signatures
Files
-
33a6b6db211ed57362207188c91912b677ca1b4e3d73b062d413a21dcae9e3db.exe windows x86
7bd4e245dd46a19e4b2e18763011367d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mssign32
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllUnregisterServer
FreeCryptProvFromCert
GetCryptProvFromCert
PvkFreeCryptProv
DllRegisterServer
DllRegisterServer
DllRegisterServer
kernel32
VirtualAlloc
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
odbc32
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
CloseODBCPerfData
Sections
.text Size: 512B - Virtual size: 433B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE