Static task
static1
Behavioral task
behavioral1
Sample
249b5cd74f04eb0293ca6d7c574037de4caf128eac87ab75ee6c567da73f6d3a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
249b5cd74f04eb0293ca6d7c574037de4caf128eac87ab75ee6c567da73f6d3a.exe
Resource
win10v2004-20220812-en
General
-
Target
249b5cd74f04eb0293ca6d7c574037de4caf128eac87ab75ee6c567da73f6d3a
-
Size
256KB
-
MD5
955d75c7d14db368ee6bdfa5bc8d6688
-
SHA1
bf5b3e5f0f08fbf11ddbdb1edba09590167003ed
-
SHA256
249b5cd74f04eb0293ca6d7c574037de4caf128eac87ab75ee6c567da73f6d3a
-
SHA512
6081760f347dc4f550fdf53238328631f520bf9f6742f7740437a343a0f6c0cef638b90c1a5c0c1abb1a56f072ebb09a023008b6739aa1b9dc243a879e7a2ac4
-
SSDEEP
6144:QQJ/9TDTQgwPA2zcRzab2dm+HIlrqU3bKQ:QA9TDcgdgbem+sqC+Q
Malware Config
Signatures
Files
-
249b5cd74f04eb0293ca6d7c574037de4caf128eac87ab75ee6c567da73f6d3a.exe windows x86
d83698ccc8aa7caf3fd80fadd05ff575
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
ExitProcess
GetModuleHandleA
Sleep
LoadLibraryA
CreateEventA
InterlockedExchange
CreateFileA
CloseHandle
VirtualAlloc
ResetEvent
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
WriteFile
TerminateProcess
GetCurrentProcess
HeapFree
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
FlushFileBuffers
HeapAlloc
HeapReAlloc
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
SetEndOfFile
ReadFile
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
gdi32
CreateCompatibleDC
advapi32
LogonUserA
crypt32
CertEnumCTLContextProperties
CryptMsgClose
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 212KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ