Static task
static1
Behavioral task
behavioral1
Sample
925c11fd2eb462b42667c44e6bf6325c5e95e78e3a031ffa26b09053d1001287.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
925c11fd2eb462b42667c44e6bf6325c5e95e78e3a031ffa26b09053d1001287.exe
Resource
win10v2004-20220901-en
General
-
Target
925c11fd2eb462b42667c44e6bf6325c5e95e78e3a031ffa26b09053d1001287
-
Size
403KB
-
MD5
96210c5632a363e6296988e3776706d3
-
SHA1
64dd5c1f7a9c6e8cd96eb1deeb37eb372fd0673b
-
SHA256
925c11fd2eb462b42667c44e6bf6325c5e95e78e3a031ffa26b09053d1001287
-
SHA512
b5acdf5128b3027a0d221ae5ca723bf59db7b238b13ccd9c2b6182df71e33cd8ebe22b78a515a0d2a123f83dfb96805f2f5e77ec53db5b7df2f67f2a9ba17a6a
-
SSDEEP
6144:azzJj8dlj6rUs1ybKQsSTlY0MOjjBBsVfkRMr6x2UiiRkYTNPQdRkUj2rOLi:azOD6r31yG6MOvBBnRMi2i+YpPQpjUJ
Malware Config
Signatures
Files
-
925c11fd2eb462b42667c44e6bf6325c5e95e78e3a031ffa26b09053d1001287.exe windows x86
c8ad112a4e12e5956072f5fa69b2ea14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetFileSize
GlobalAlloc
GetTickCount
ExitProcess
GetProcAddress
LoadLibraryA
GetLastError
CreateFileW
GetModuleHandleA
Sleep
VirtualAlloc
GetTempPathA
GlobalAddAtomA
CreateProcessA
CopyFileA
GetCommandLineA
DeleteFileA
GetModuleFileNameA
GetCurrentProcessId
lstrcpyA
GetModuleFileNameW
GetSystemTime
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
GetSystemInfo
user32
GetForegroundWindow
GetDesktopWindow
GetActiveWindow
GetWindowLongA
GetDC
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ