Static task
static1
Behavioral task
behavioral1
Sample
927ed49031cfdf1f49db1e1e93ad55e2b52519b765818afe0cf0a738cbf42dda.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
927ed49031cfdf1f49db1e1e93ad55e2b52519b765818afe0cf0a738cbf42dda.exe
Resource
win10v2004-20221111-en
General
-
Target
927ed49031cfdf1f49db1e1e93ad55e2b52519b765818afe0cf0a738cbf42dda
-
Size
376KB
-
MD5
01cee4761763db79ffdc7dc77300cb5a
-
SHA1
4013cb73d7fe6d8f7b46aae877b7697d9da2ff89
-
SHA256
927ed49031cfdf1f49db1e1e93ad55e2b52519b765818afe0cf0a738cbf42dda
-
SHA512
6008cfd52d13e11a499856756d0798c5b55477333a28851dac0b0abdf15256ee0953fbbc7044c3238dd66522c5bc49812aa29dabbfe85eba6aa0d876b5ddcde3
-
SSDEEP
6144:o2zIJPpQE1IkcSTGbgkbdX7/HvVe7WMxla9H07CL67COZvmB5os2Y7W:rIQ1kn6bgwX7v1HexH5mB5Lq
Malware Config
Signatures
Files
-
927ed49031cfdf1f49db1e1e93ad55e2b52519b765818afe0cf0a738cbf42dda.exe windows x86
421191deda84cdc33f4c4678611f11b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
Sleep
GlobalFree
LocalFree
GetModuleHandleA
GlobalAlloc
LoadLibraryA
GetFileSize
VirtualFree
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
VirtualProtect
VirtualQuery
CloseHandle
GetSystemTime
WriteFile
ReadFile
GetSystemInfo
SetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
HeapCreate
lstrcpyA
LocalAlloc
CreateFileA
RemoveDirectoryA
LoadLibraryExW
GetProcAddress
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetLastError
FreeEnvironmentStringsA
CopyFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
user32
CreateWindowExA
GetDesktopWindow
SetWindowRgn
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
GetDC
ReleaseDC
IsWindow
IsWindowEnabled
ShowWindow
gdi32
DeleteObject
CreateCompatibleBitmap
GetDIBits
GetObjectA
CreatePenIndirect
ole32
CoUninitialize
oleaut32
VariantCopy
VariantInit
lz32
LZClose
msvfw32
ICClose
avifil32
AVIClearClipboard
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 716KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ