Static task
static1
Behavioral task
behavioral1
Sample
beaaa206da7636564a29d9f29037716a722acf3eb79bd2cd362c67f84f18af23.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
beaaa206da7636564a29d9f29037716a722acf3eb79bd2cd362c67f84f18af23.exe
Resource
win10v2004-20220812-en
General
-
Target
beaaa206da7636564a29d9f29037716a722acf3eb79bd2cd362c67f84f18af23
-
Size
120KB
-
MD5
907213acdeb2c03e43366fdc2cc94898
-
SHA1
f39e954b03fcea2baed43cf90f03f067f5aa279c
-
SHA256
beaaa206da7636564a29d9f29037716a722acf3eb79bd2cd362c67f84f18af23
-
SHA512
a458ebc1209067e12a1baf917e5b1b5dd915b8c7c5a3b709c656570fff1086f08f640f7785bf97281871a198fcc48ae9deeec232f427b7c7b1cd4f781ec38e9c
-
SSDEEP
3072:UUAoeavncXp7l+oa77EdNQclQvdAh2TXqLJnvp+A10H:R9eGncXpldNQmQ2WihP0H
Malware Config
Signatures
Files
-
beaaa206da7636564a29d9f29037716a722acf3eb79bd2cd362c67f84f18af23.exe windows x86
d6a1d87d8e9433c05f5f0a6b0d535aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
lstrcmpiA
GetModuleHandleA
RtlUnwind
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle
wininet
InternetGetConnectedState
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ