Static task
static1
Behavioral task
behavioral1
Sample
897e9e751b96ad154eb9835ece6047ff393ee13173863a16305bcb4df6b3314c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
897e9e751b96ad154eb9835ece6047ff393ee13173863a16305bcb4df6b3314c.exe
Resource
win10v2004-20221111-en
General
-
Target
897e9e751b96ad154eb9835ece6047ff393ee13173863a16305bcb4df6b3314c
-
Size
56KB
-
MD5
3fc4a6c5af197e49955a754eb845a358
-
SHA1
28cfa8bef757d5b9e2746716e807930e2031ef84
-
SHA256
897e9e751b96ad154eb9835ece6047ff393ee13173863a16305bcb4df6b3314c
-
SHA512
a6c180411c355089cf70d2f4139c8df6fe01883d73597700719b1ca76d07aaa8232b6eb0a38df76c8339b6acd524bfef569cd6f02581c580d4e7176e0de2a1af
-
SSDEEP
768:N3bZrFao3yFSSvnFG0lj4xF27SBoq4U6u09ZcoE3judzlcEz0v6D:NlrFanSSvFG0lMxF2Wi9FdKoceJFD
Malware Config
Signatures
Files
-
897e9e751b96ad154eb9835ece6047ff393ee13173863a16305bcb4df6b3314c.exe windows x86
7714c19d25d43e05e349e3d800aa3b7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
CreateDirectoryA
CopyFileA
DeleteFileA
GetLastError
HeapSize
HeapFree
HeapAlloc
RtlUnwind
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
CloseHandle
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
ReadFile
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
LoadLibraryA
InterlockedExchange
VirtualQuery
SetEndOfFile
GetLocaleInfoA
VirtualProtect
GetSystemInfo
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE