Static task
static1
Behavioral task
behavioral1
Sample
f3a16170ee64764604dbcf56a58925e3b0bd15536ec84b3a3f52412748684ea5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3a16170ee64764604dbcf56a58925e3b0bd15536ec84b3a3f52412748684ea5.exe
Resource
win10v2004-20221111-en
General
-
Target
f3a16170ee64764604dbcf56a58925e3b0bd15536ec84b3a3f52412748684ea5
-
Size
58KB
-
MD5
bf3d84242c32c7da13ba23120088b4d4
-
SHA1
4d60060cf4d22187311de6ea699d31bdf8b3c15b
-
SHA256
f3a16170ee64764604dbcf56a58925e3b0bd15536ec84b3a3f52412748684ea5
-
SHA512
fdc888fcd2172396688d196cc5d6a24cfc8afc7687191c2734c4d6e66ae05a8956c2dedf8921750fb3ef0cfe8383e8f618f331d455ff3091b8bb15a6d6116ca5
-
SSDEEP
768:8myegkMUREYKx+xlSnufKwgFj9ISba56K+Mt44yHl:8VelzPxgws9ISm5Nt44yHl
Malware Config
Signatures
Files
-
f3a16170ee64764604dbcf56a58925e3b0bd15536ec84b3a3f52412748684ea5.exe windows x86
d2fc61cd5a4872d1c7edb8cd1cbede0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
WinExec
GetLocalTime
CopyFileA
lstrcpyA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CreateThread
SetFileAttributesA
GetLastError
CloseHandle
ReleaseMutex
OpenMutexA
GetTempPathA
WaitForSingleObject
ExitProcess
CreateMutexA
GetModuleHandleA
lstrlenA
GlobalMemoryStatusEx
GetLocaleInfoW
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetTickCount
lstrcatA
GetSystemDirectoryA
ExitThread
TerminateProcess
CreateProcessA
VirtualQueryEx
ReadProcessMemory
GetThreadContext
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualProtectEx
VirtualAllocEx
VirtualAlloc
GetCurrentProcess
RtlUnwind
HeapAlloc
VirtualFree
HeapFree
HeapReAlloc
ReadFile
GetStdHandle
GetFileType
SetFilePointer
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CreateFileA
SetEndOfFile
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE