Static task
static1
Behavioral task
behavioral1
Sample
a1fdcf0f30b1a944292b87455e62fee4c44cc6bcfef2c416aab9ec8394f79c92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1fdcf0f30b1a944292b87455e62fee4c44cc6bcfef2c416aab9ec8394f79c92.exe
Resource
win10v2004-20221111-en
General
-
Target
a1fdcf0f30b1a944292b87455e62fee4c44cc6bcfef2c416aab9ec8394f79c92
-
Size
104KB
-
MD5
24d5397b2b42037392a750482dbc1679
-
SHA1
02b9b616db757c4b45786bfd7faa82e629ed75f4
-
SHA256
a1fdcf0f30b1a944292b87455e62fee4c44cc6bcfef2c416aab9ec8394f79c92
-
SHA512
0c14e4851e048b75f3c2f3d3b71a06a7d02f0fac500c8f1a4db91cc63a9a4550c8438ae15b96d8d67612c906198204dffaaeb8ee19a8c7d35125f8b04ca581e0
-
SSDEEP
1536:EMltOCIIi8s5LeloMHga0kL0qj5SeZLPOUNVjJ6tVe1lz5evJjv3l:DY54v30qj5S/ud1vevJj/l
Malware Config
Signatures
Files
-
a1fdcf0f30b1a944292b87455e62fee4c44cc6bcfef2c416aab9ec8394f79c92.exe windows x86
0641d120c17a37cc740447184fd600b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleFileNameExA
kernel32
FreeEnvironmentStringsW
ExitProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetLastError
FindResourceExA
LockResource
LoadResource
FindResourceA
WaitForSingleObject
CreateThread
SetLastError
LoadLibraryA
IsBadReadPtr
VirtualProtect
VirtualAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapFree
RaiseException
CloseHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
DeleteCriticalSection
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
SetEndOfFile
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ