Static task
static1
Behavioral task
behavioral1
Sample
2e6306dce100a01fd79a1ae2051104d1f9541412f8f9f6a0e032a720332ec453.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e6306dce100a01fd79a1ae2051104d1f9541412f8f9f6a0e032a720332ec453.exe
Resource
win10v2004-20221111-en
General
-
Target
2e6306dce100a01fd79a1ae2051104d1f9541412f8f9f6a0e032a720332ec453
-
Size
193KB
-
MD5
ab00925f0afc9dc27bbda102fde799a3
-
SHA1
acfd0c15bbdf08d365132a9102c34ed21b53edc1
-
SHA256
2e6306dce100a01fd79a1ae2051104d1f9541412f8f9f6a0e032a720332ec453
-
SHA512
473886d031c1a53c836ba84017352ccb2f690958aa41ad2f5ce43d6e266afa29c70d6d8dc34c9fbbd2a73934c45842637ea9b49743098a47a710ca95a1457469
-
SSDEEP
3072:3R3oldr51s5nQBB0bh6U8eQFJzyTgJ5jiw0kIVbWrZ60MIysqBO/BV+j4XZ+y2a:3R3sdsQzQVE2TwBi1i60MIJnBdb
Malware Config
Signatures
Files
-
2e6306dce100a01fd79a1ae2051104d1f9541412f8f9f6a0e032a720332ec453.exe windows x86
a32f90a03b2ccd2a1793c1c476b552e7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
RtlUnwind
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
Sleep
HeapSize
MultiByteToWideChar
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ