Static task
static1
Behavioral task
behavioral1
Sample
f96064252fa87b5f8d7c43079b766c82c3d574f1b8cb683e89eac1aa9e94f852.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f96064252fa87b5f8d7c43079b766c82c3d574f1b8cb683e89eac1aa9e94f852.exe
Resource
win10v2004-20221111-en
General
-
Target
f96064252fa87b5f8d7c43079b766c82c3d574f1b8cb683e89eac1aa9e94f852
-
Size
2.8MB
-
MD5
c542d671be89339b17efe952c7f19f39
-
SHA1
532dcd56918bfcee2faacf4c65d70f103cdfc4c6
-
SHA256
f96064252fa87b5f8d7c43079b766c82c3d574f1b8cb683e89eac1aa9e94f852
-
SHA512
20f8acdee170ce483ea910927a813c3e61cc172d8e6bbf0e67eb17905b90b821fee5d4b7baf6d269d9b1175a243ce3e4c253dab9d03a1630ed998e565657f916
-
SSDEEP
49152:ciS1Oly/8QkP0RT9UhChJN1fbWZLl93/n7aJ:NS1j8QkP0RT9UhChAZLlZM
Malware Config
Signatures
Files
-
f96064252fa87b5f8d7c43079b766c82c3d574f1b8cb683e89eac1aa9e94f852.exe windows x86
dc33d9fc9d24167d6adb318dd826c9d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
CompareFileTime
GetFileSize
GetFileTime
CloseHandle
CreateFileA
SetFileAttributesA
GetFileAttributesA
LocalFree
FormatMessageA
GetLastError
GetCurrentDirectoryA
SetFileTime
DeleteFileA
CreateDirectoryA
CopyFileA
VirtualAlloc
InitializeCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceA
CreateEventA
WaitForSingleObject
WriteFile
SetFilePointerEx
ReadFile
GetOverlappedResult
ResetEvent
FindClose
FindFirstFileW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
CreateFileW
FindNextFileW
DeleteCriticalSection
FindFirstFileA
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadAffinityMask
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
Sleep
InterlockedExchange
RtlUnwind
RaiseException
ExitProcess
HeapFree
GetCommandLineA
GetVersionExA
HeapSize
HeapAlloc
GetSystemTimeAsFileTime
IsBadReadPtr
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
FatalAppExitA
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
SetUnhandledExceptionFilter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
FlushFileBuffers
SetFilePointer
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
VirtualQuery
IsBadCodePtr
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
GetLocaleInfoW
GetTimeZoneInformation
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE