Static task
static1
Behavioral task
behavioral1
Sample
f1054c95c5c39d85c3b540f736712077b51c92c7aeeabbe032c909275c23da24.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1054c95c5c39d85c3b540f736712077b51c92c7aeeabbe032c909275c23da24.exe
Resource
win10v2004-20221111-en
General
-
Target
f1054c95c5c39d85c3b540f736712077b51c92c7aeeabbe032c909275c23da24
-
Size
278KB
-
MD5
f9f82a0af00335fd05822ae319436cb7
-
SHA1
a120ac9e51c2a9d63cac24c58b649134b329d07c
-
SHA256
f1054c95c5c39d85c3b540f736712077b51c92c7aeeabbe032c909275c23da24
-
SHA512
94a3cf3d4aa852bcfe6b3161fb5caeaffd3aa5693e7453466ad33ee3ee2084ebf0e735037d1fc00fee295b2951e2ef5406450ae04e8bcbce40c10c294dbb615b
-
SSDEEP
6144:pHOP4bqsRq++Fo3PzXU8dUUZb9R96nbEDrdHDmlqMI:puAbXRq++cJHtv9eGxHkq
Malware Config
Signatures
Files
-
f1054c95c5c39d85c3b540f736712077b51c92c7aeeabbe032c909275c23da24.exe windows x86
c39b4f3d5639a9966ff29cca447c5b54
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
CloseHandle
TlsAlloc
AddAtomW
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
RaiseException
GetCurrentProcess
GetSystemTimeAsFileTime
TerminateProcess
GetStdHandle
QueryPerformanceCounter
TlsSetValue
DeviceIoControl
GetCommandLineA
SetUnhandledExceptionFilter
GetCurrentThread
TlsFree
SetHandleCount
EnumResourceNamesA
GetLocalTime
GetVersionExA
TlsGetValue
GetCurrentProcessId
GetVersion
OutputDebugStringW
HeapAlloc
GetModuleFileNameA
SetLastError
GetProcessHeap
GetTickCount
GetStartupInfoA
GetModuleHandleW
GetFileType
RtlUnwind
InterlockedExchange
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
msvcrt
__set_app_type
_vsnwprintf
_acmdln
__p__commode
_initterm
exit
_exit
_XcptFilter
__p__fmode
_ismbblead
__setusermatherr
__getmainargs
_vsnprintf
_cexit
_amsg_exit
memset
?terminate@@YAXXZ
_controlfp
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ