Static task
static1
Behavioral task
behavioral1
Sample
af25eebdcc98b48cc8dc2b34dc9e31065f896b5e2a5e06540647b59a1707e7c1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af25eebdcc98b48cc8dc2b34dc9e31065f896b5e2a5e06540647b59a1707e7c1.exe
Resource
win10v2004-20221111-en
General
-
Target
af25eebdcc98b48cc8dc2b34dc9e31065f896b5e2a5e06540647b59a1707e7c1
-
Size
284KB
-
MD5
f0c99bb536f8a644d2cd960b4795afd6
-
SHA1
8728e59875ebec46e590125871e8e9cf6b13e753
-
SHA256
af25eebdcc98b48cc8dc2b34dc9e31065f896b5e2a5e06540647b59a1707e7c1
-
SHA512
8a311f3449fc86ff9648f739889f91682c67442ed59e006142e4e7b6b692e5f792499ced097ca80bd84d6875f7627fdb7c73eb6c883203c73c55ebbcce9f8c6c
-
SSDEEP
1536:uwTuFsbbwmCkdwuJf6cKtKNSZJJozk5ZigYkvhnR:SC4mTqQSZJCzk5Zok5n
Malware Config
Signatures
Files
-
af25eebdcc98b48cc8dc2b34dc9e31065f896b5e2a5e06540647b59a1707e7c1.exe windows x86
6834c0d38d348688897663d61fb7636f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
LeaveCriticalSection
UnhandledExceptionFilter
GetModuleHandleA
GetTickCount
WideCharToMultiByte
GetVersionExA
GetProcessHeap
GetCurrentThreadId
lstrcpyW
LocalAlloc
GetCommandLineA
GetCurrentProcess
WaitForSingleObject
Sleep
FreeLibrary
GetModuleHandleW
SetLastError
CreateThread
GetModuleFileNameA
WriteFile
GetCurrentProcess
MultiByteToWideChar
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
CreateThread
GetCommandLineW
GetModuleHandleA
GetSystemTimeAsFileTime
GetProcessHeap
LoadLibraryA
WriteFile
CloseHandle
InterlockedIncrement
LocalFree
LeaveCriticalSection
WideCharToMultiByte
WriteFile
QueryPerformanceCounter
GetModuleHandleA
FreeLibrary
HeapReAlloc
GetCurrentThreadId
FreeLibrary
InitializeCriticalSection
EnterCriticalSection
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.aata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE