Static task
static1
Behavioral task
behavioral1
Sample
92c717dc624f1aae5c8c09a288a68e62412c889f7fdd26737df022ee51d44f0b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92c717dc624f1aae5c8c09a288a68e62412c889f7fdd26737df022ee51d44f0b.exe
Resource
win10v2004-20220812-en
General
-
Target
92c717dc624f1aae5c8c09a288a68e62412c889f7fdd26737df022ee51d44f0b
-
Size
58KB
-
MD5
04d3493220861df3e23b0c343d63b10d
-
SHA1
3ab3f7d8a9fc0c93640d03c9d440ba96a99194ad
-
SHA256
92c717dc624f1aae5c8c09a288a68e62412c889f7fdd26737df022ee51d44f0b
-
SHA512
f18d3a322d901c85c0bafc0d3f9925565e04785fe5fb1c21304df55c589c905ee00dc526363adae6af4d8ab1dc7494327781308c4ccd44c95c7a500100e90482
-
SSDEEP
1536:pd9ujgvhB4UrDjfBblBXdHdM4DWSUtKSXk2dcEWZ:p+czjfBblDHmxSUEekz7Z
Malware Config
Signatures
Files
-
92c717dc624f1aae5c8c09a288a68e62412c889f7fdd26737df022ee51d44f0b.exe windows x86
6029cf66cd88e69e2274df7114f6ee04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZCopy
LZOpenFileA
LZClose
kernel32
CloseHandle
CreateFileA
WriteFile
lstrlenA
SetFileTime
GetFileInformationByHandle
GetVersionExA
LockResource
SizeofResource
LoadResource
FindResourceExA
GetLastError
GetCurrentProcess
FindClose
FindFirstFileA
CreateNamedPipeA
CreateDirectoryA
WaitForSingleObject
CreateProcessA
GetTempFileNameA
GetTempPathA
GetTickCount
lstrcatA
lstrcpyA
lstrlenW
GetSystemDirectoryA
ExitProcess
GetStartupInfoA
GetCurrentProcessId
CopyFileA
GetModuleFileNameA
GetModuleHandleA
GetCommandLineA
HeapFree
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetProcAddress
TerminateProcess
GetLocaleInfoA
GetCPInfo
VirtualProtect
GetSystemInfo
VirtualQuery
GetStringTypeA
GetStringTypeW
RtlUnwind
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
LoadLibraryA
GlobalAlloc
GlobalFree
OpenProcess
user32
wsprintfA
wsprintfW
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ