Static task
static1
Behavioral task
behavioral1
Sample
f304c995b7665dbb7bdffd687cd5a470ac9405f373c86b8623bac1d94b036f4d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f304c995b7665dbb7bdffd687cd5a470ac9405f373c86b8623bac1d94b036f4d.exe
Resource
win10v2004-20220812-en
General
-
Target
f304c995b7665dbb7bdffd687cd5a470ac9405f373c86b8623bac1d94b036f4d
-
Size
147KB
-
MD5
06d322563040a01e525d3cba30c2f07b
-
SHA1
85964de1fdbcd82dc9e521373a294a74aae50eaf
-
SHA256
f304c995b7665dbb7bdffd687cd5a470ac9405f373c86b8623bac1d94b036f4d
-
SHA512
0824bb66236ce18911b886df8b74246cb365f5aa77929e57951e3bc43277ff785bb8b83ead0128ecbe4d5d7a7a0724a276dc5fdd0509d670ca28508587d922d7
-
SSDEEP
3072:pftot+EO2BhUtU9CjyrhMWJZvI8Pe8u35eBZQet8QF:x2wUz9FZvT281QqvF
Malware Config
Signatures
Files
-
f304c995b7665dbb7bdffd687cd5a470ac9405f373c86b8623bac1d94b036f4d.exe windows x86
77f1fad4d65c522efa829b9a96ee8a73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
Sleep
GetCurrentThreadId
GetFileAttributesA
GetProcAddress
LoadLibraryA
GlobalLock
GlobalAlloc
lstrlenA
SetFileAttributesA
GetTempPathA
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetTempFileNameA
lstrcatA
CloseHandle
GetCurrencyFormatA
WriteFile
RtlUnwind
VirtualFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LCMapStringW
user32
CreateWindowExA
CloseWindow
wsprintfA
GetWindowTextLengthW
LoadMenuA
GetSubMenu
GetCursorPos
ClientToScreen
SetClipboardData
gdi32
CreatePen
GetDeviceCaps
DeleteDC
CreateCompatibleDC
shlwapi
PathFileExistsA
PathAppendA
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ