Static task
static1
Behavioral task
behavioral1
Sample
19b60a4460fe81a249f257d8d59bb2433c4e497726d3edaf18ae9045d18d3fb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
19b60a4460fe81a249f257d8d59bb2433c4e497726d3edaf18ae9045d18d3fb9.exe
Resource
win10v2004-20220812-en
General
-
Target
19b60a4460fe81a249f257d8d59bb2433c4e497726d3edaf18ae9045d18d3fb9
-
Size
44KB
-
MD5
8be9907c916e38ab80448eb87a2ea628
-
SHA1
94b99a874c1ee707131847ec6a8b103aefc1b338
-
SHA256
19b60a4460fe81a249f257d8d59bb2433c4e497726d3edaf18ae9045d18d3fb9
-
SHA512
0176bc37f8490126bf9bec7c538d8720eef15fcdff4f6f7f6218b86dbef1ab7c0824174dbf427863931b3f459af7f9041c190c107705ae9b35a6a792442953f9
-
SSDEEP
768:Zw+4WwlI8KFGI5dLka0CLBA3w02Z3Dl4qNVR1Dm:6+QIbGctkxCLBA3wXZ3Z9Dm
Malware Config
Signatures
Files
-
19b60a4460fe81a249f257d8d59bb2433c4e497726d3edaf18ae9045d18d3fb9.exe windows x86
f8a36e0a92e3d853ba6a3f2b2931ac70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetVersionExA
lstrlenA
GetLocalTime
FreeLibrary
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE