Static task
static1
Behavioral task
behavioral1
Sample
f67199199af311d7fa8c72ce3027672a16221d4f7d69187abd3195e602013b52.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f67199199af311d7fa8c72ce3027672a16221d4f7d69187abd3195e602013b52.exe
Resource
win10v2004-20220812-en
General
-
Target
f67199199af311d7fa8c72ce3027672a16221d4f7d69187abd3195e602013b52
-
Size
226KB
-
MD5
f6638e6d2df486e53a120654868ea93e
-
SHA1
4256a123c26dc26c0c079ac3b1298981db8b0e72
-
SHA256
f67199199af311d7fa8c72ce3027672a16221d4f7d69187abd3195e602013b52
-
SHA512
826e6a80553dec41e1c3b7cbb83d9097f75b1e713b792c758dc81866a91f49ef0f315a1529909305ccbee0071638343c4498a9b1bd85c607d17c2f990a54ec5d
-
SSDEEP
3072:1xIWQhPxivyJqoSPOmVxWPxcADOksyKzs9G4gFfpMv9Do3OlYxHFMjnW1eI:/IP50h2xPxc6snzs9G4UYDo3yYxHFH4I
Malware Config
Signatures
Files
-
f67199199af311d7fa8c72ce3027672a16221d4f7d69187abd3195e602013b52.exe windows x86
265e7dc961869510e891a845517f723b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
GetStartupInfoA
CloseHandle
GetFileAttributesA
SetFileAttributesA
lstrcatA
CompareStringA
GetThreadLocale
Sleep
TerminateProcess
SwitchToThread
SetThreadPriority
GetCurrentThread
GetCurrentProcess
WideCharToMultiByte
LoadLibraryA
DeleteFileA
GetBinaryTypeA
SetHandleInformation
CreatePipe
RaiseException
SetEnvironmentVariableA
CompareStringW
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
IsBadCodePtr
GetModuleHandleA
GetLastError
FormatMessageA
lstrlenA
LocalAlloc
GetProcAddress
MulDiv
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetStringTypeA
ReadFile
user32
SetRect
DrawCaption
GetSysColor
GetGuiResources
GetWindowTextA
MessageBoxA
GetDC
gdi32
DeleteObject
CreateBitmap
GetDeviceCaps
CreateFontA
CreateEllipticRgn
SetBkMode
SelectObject
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ