Static task
static1
Behavioral task
behavioral1
Sample
d433721a208226c61b24b32d4e3bae5306e51e85a987120422557567f0dff1c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d433721a208226c61b24b32d4e3bae5306e51e85a987120422557567f0dff1c4.exe
Resource
win10v2004-20220901-en
General
-
Target
d433721a208226c61b24b32d4e3bae5306e51e85a987120422557567f0dff1c4
-
Size
494KB
-
MD5
906c13a57f9e0a0a6793e7f9db6b53f5
-
SHA1
1d2803801d81a9e077f462f7c3da1df9d06db362
-
SHA256
d433721a208226c61b24b32d4e3bae5306e51e85a987120422557567f0dff1c4
-
SHA512
a59d4f111d6322860cd1f66f7a08ca56c65f4611ae63ed556d578bda2139bef7ebc46f4402034904193176fe65ec078581e62a56a90845a3cd4175c8fbeae10a
-
SSDEEP
12288:rHwhDZMBnnbW3YWURSlrd8gnY4kAF9Pe4d:rg92nzRSl5Y4zFte4d
Malware Config
Signatures
Files
-
d433721a208226c61b24b32d4e3bae5306e51e85a987120422557567f0dff1c4.exe windows x86
dd7f62a0d69746a0ef02477692e50bd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleFileNameW
GetProcAddress
GetTempPathW
LoadLibraryW
CreateDirectoryW
InterlockedIncrement
InterlockedDecrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
RtlUnwind
RaiseException
GetModuleHandleA
ExitProcess
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
HeapSize
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
CreateFileA
CreateFileW
SetEndOfFile
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Stone Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE