Static task
static1
Behavioral task
behavioral1
Sample
30e647cfaf08b64bd50a98ea13da91db1155846bd211248290792a80bb386b7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30e647cfaf08b64bd50a98ea13da91db1155846bd211248290792a80bb386b7e.exe
Resource
win10v2004-20220812-en
General
-
Target
30e647cfaf08b64bd50a98ea13da91db1155846bd211248290792a80bb386b7e
-
Size
532KB
-
MD5
19742301adcbab215654f3ec206fa050
-
SHA1
e881ee3b3baf0e058cfcf160965747db7b16adfb
-
SHA256
30e647cfaf08b64bd50a98ea13da91db1155846bd211248290792a80bb386b7e
-
SHA512
99942ccaa7b22b6124301c07e22cf0a6ef3add6f7979504b419e33c8a66266717ab32a29840f6f4f09872f32069e45a07dd18f7de694266d87829e889ff08fb2
-
SSDEEP
12288:dE4Bufz8nenjbcjO8n9egHX5A8l2Gad7NzWJKKC0UmoP:O4BKuensjN9BXFlTadNzWfsmoP
Malware Config
Signatures
Files
-
30e647cfaf08b64bd50a98ea13da91db1155846bd211248290792a80bb386b7e.exe windows x86
fc9b98db04db4b361b6d9ba23be2d6d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
SetEndOfFile
GetFileType
Sleep
FindClose
UnmapViewOfFile
GetCurrentThreadId
GetDiskFreeSpaceA
GetACP
FindNextFileA
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
SetFilePointer
GetCPInfo
CompareStringW
CreateMutexA
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
WideCharToMultiByte
DeleteFileA
LockResource
SetConsoleCtrlHandler
FileTimeToLocalFileTime
VirtualFree
GetSystemDirectoryA
LoadLibraryA
ExitProcess
GetDriveTypeA
WaitForSingleObject
FileTimeToSystemTime
lstrlenW
GetLastError
HeapAlloc
GetProcessHeap
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetProcAddress
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetOEMCP
HeapReAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetDesktopWindow
wsprintfA
EndDialog
GetSystemMetrics
SetForegroundWindow
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ