Static task
static1
Behavioral task
behavioral1
Sample
95a21823681d3ce6e6a2f7ef00d46f39f5dfe50a4172c5bf1c09b9ed10ed3f01.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
95a21823681d3ce6e6a2f7ef00d46f39f5dfe50a4172c5bf1c09b9ed10ed3f01.exe
Resource
win10v2004-20220901-en
General
-
Target
95a21823681d3ce6e6a2f7ef00d46f39f5dfe50a4172c5bf1c09b9ed10ed3f01
-
Size
98KB
-
MD5
95b7e39e5c73c66cd46df660f719766c
-
SHA1
c82bd94310c602fa07b8f9959836b4b12b350a65
-
SHA256
95a21823681d3ce6e6a2f7ef00d46f39f5dfe50a4172c5bf1c09b9ed10ed3f01
-
SHA512
38c0449b47f33500d13a0dcb79d4b915b067b715ef553757d3be9019547e9bf44bd8eb794e9b37859d57c9293627ac25df682c69630cd531b6a4a2bd7d1b431e
-
SSDEEP
1536:L02wfP4KO83HFnEzgbMIq8eClGDpmpvLsNc6/HfdpcSNwcKFLFNqzL:L5981/bgmpvoNt//dpcS+cKFLrqzL
Malware Config
Signatures
Files
-
95a21823681d3ce6e6a2f7ef00d46f39f5dfe50a4172c5bf1c09b9ed10ed3f01.exe windows x86
fc2f93bcd8ede944ce13d845156e8433
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
GetProcAddress
LoadLibraryA
InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ResetEvent
lstrcpyA
lstrlenA
GetPrivateProfileSectionNamesA
lstrcatA
GetWindowsDirectoryA
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
lstrcmpA
GetPrivateProfileStringA
GetVersionExA
DeleteFileA
GetLastError
CreateDirectoryA
GetFileAttributesA
CreateProcessA
GetDriveTypeA
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
FindFirstFileA
LocalAlloc
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
MoveFileA
WritePrivateProfileStringA
GetCurrentProcess
OpenProcess
GetLocalTime
Sleep
InterlockedExchange
ExitProcess
GetModuleFileNameA
WinExec
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalSize
GetTickCount
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
TerminateProcess
PeekNamedPipe
WaitForMultipleObjects
Process32Next
lstrcmpiA
GetCurrentThreadId
DeviceIoControl
GetSystemInfo
GlobalMemoryStatus
FreeResource
LoadResource
FindResourceA
SetErrorMode
CreateMutexA
RaiseException
GetModuleHandleA
msvfw32
ICCompressorFree
ICSeqCompressFrameStart
ICSeqCompressFrame
ICClose
ICOpen
ICSendMessage
msvcrt
??3@YAXPAX@Z
memcpy
__CxxFrameHandler
memmove
ceil
_ftol
strlen
strstr
memcmp
_CxxThrowException
strchr
malloc
strcpy
strcmp
free
_except_handler3
strrchr
atoi
strncmp
??2@YAPAXI@Z
strcat
_errno
_strcmpi
calloc
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
memset
_strnicmp
_strupr
strncpy
_beginthreadex
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ujyhkuy Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ