Static task
static1
Behavioral task
behavioral1
Sample
f869ba1270b9115f7f0443d194b422bae6ebc3fe900bde26a91b1053f1df82e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f869ba1270b9115f7f0443d194b422bae6ebc3fe900bde26a91b1053f1df82e9.exe
Resource
win10v2004-20220812-en
General
-
Target
f869ba1270b9115f7f0443d194b422bae6ebc3fe900bde26a91b1053f1df82e9
-
Size
48KB
-
MD5
ef2b5f7c99394380230739f548646503
-
SHA1
f2dabc80547c554140b80435f525d11c4dc44d08
-
SHA256
f869ba1270b9115f7f0443d194b422bae6ebc3fe900bde26a91b1053f1df82e9
-
SHA512
558ec3eb5803f6f8395fbba9ed467e064868db1d01889f2dd00d39b8c07c47ce2b593bb076917039fcc70a1174ce4e93060c87846b22171a775ed8b2e3e1a811
-
SSDEEP
768:J/jIC344rlVbNlkp8UQVPgE7sjtxZUCMTlQp+agvmFwWU1zx:9jfrlVBlSmPd7u8CcQ8agm2
Malware Config
Signatures
Files
-
f869ba1270b9115f7f0443d194b422bae6ebc3fe900bde26a91b1053f1df82e9.exe windows x86
989061603d30c3e5eed1d8e67b97207d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
activeds
FreeADsMem
kernel32
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
LoadLibraryW
SetThreadLocale
CloseHandle
LeaveCriticalSection
WaitForSingleObject
SetFilePointer
VirtualAlloc
GetLocaleInfoA
GetProcessHeap
EnumSystemLocalesA
GetThreadLocale
FormatMessageA
GetLastError
VirtualFree
GetSystemInfo
CreateFileA
WideCharToMultiByte
WaitForMultipleObjects
lstrcpyA
GetLocaleInfoW
lstrcpynA
GetEnvironmentStrings
FreeLibrary
InterlockedIncrement
GetCPInfo
GetWindowsDirectoryA
UnmapViewOfFile
LocalAlloc
IsValidCodePage
GetACP
SetCurrentDirectoryW
GetStringTypeW
CreateEventA
SetEvent
RaiseException
GetOEMCP
LoadLibraryA
HeapCreate
IsValidLocale
LocalFree
HeapReAlloc
LCMapStringW
ReleaseMutex
CreateMutexA
EnterCriticalSection
DeleteFileA
FlushFileBuffers
VirtualProtect
SetFileAttributesA
LCMapStringA
SetStdHandle
IsDBCSLeadByte
DeleteCriticalSection
GetStartupInfoA
SetLastError
GetEnvironmentStringsW
GetStringTypeA
VirtualQuery
GetCurrentDirectoryW
OutputDebugStringA
WriteFile
MapViewOfFile
GetUserDefaultLCID
FreeEnvironmentStringsA
GetModuleFileNameA
Beep
HeapDestroy
HeapFree
InterlockedExchange
lstrlenA
InitializeCriticalSection
user32
MessageBoxA
ntdll
RtlUnwind
setupapi
SetupCloseInfFile
urlmon
CopyBindInfo
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE