Static task
static1
Behavioral task
behavioral1
Sample
afa2cb24ddf3c9cf3d55cde1c3788ad240da3e64e8d8da41f69927f0cabf6a46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afa2cb24ddf3c9cf3d55cde1c3788ad240da3e64e8d8da41f69927f0cabf6a46.exe
Resource
win10v2004-20220812-en
General
-
Target
afa2cb24ddf3c9cf3d55cde1c3788ad240da3e64e8d8da41f69927f0cabf6a46
-
Size
248KB
-
MD5
8691f3515392f8b02505a29256c6b17c
-
SHA1
cbcbf289946a4737cd1fd07b849dadc9f4e148dc
-
SHA256
afa2cb24ddf3c9cf3d55cde1c3788ad240da3e64e8d8da41f69927f0cabf6a46
-
SHA512
628f8f1f9e2eefdbe23eb2c5fa318e2b1dadfd16eeecf8d37ec35278e0ea8287c4891e735ceabaf9943717e2aba5aaa8eccc7a93066a350862c528c4936c759e
-
SSDEEP
3072:ZYo1C9DvQQuEqVXJzIcDWS2K7X8u05foPpdnHZlQfe9W/x8:p1CRQlb5LJ2/5Q3HZSfWW
Malware Config
Signatures
Files
-
afa2cb24ddf3c9cf3d55cde1c3788ad240da3e64e8d8da41f69927f0cabf6a46.exe windows x86
c5a9b43cdebcd00f81c7a2eb60e8c84a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualAlloc
Sleep
CloseHandle
VirtualFree
VirtualProtect
GetProcAddress
GetModuleHandleA
OpenMutexA
LoadLibraryA
TerminateThread
GetExitCodeThread
GetLocaleInfoA
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetProcessHeap
GetTickCount
GetStartupInfoA
GetCommandLineA
GetVersionExA
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemInfo
user32
ShowWindow
LoadBitmapA
LoadAcceleratorsA
IsIconic
LoadCursorA
gdi32
GetPixel
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dbg Size: 4KB - Virtual size: 512B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 4KB - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE