Static task
static1
Behavioral task
behavioral1
Sample
279229bcd93298360019fd898ca2285149dbd496a96b29c24a193e477ff31fe5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
279229bcd93298360019fd898ca2285149dbd496a96b29c24a193e477ff31fe5.exe
Resource
win10v2004-20220812-en
General
-
Target
279229bcd93298360019fd898ca2285149dbd496a96b29c24a193e477ff31fe5
-
Size
463KB
-
MD5
76063f9f0b8c34176264418220f42e6f
-
SHA1
3bad820769bff580d844074e70d520d4b0e6a86b
-
SHA256
279229bcd93298360019fd898ca2285149dbd496a96b29c24a193e477ff31fe5
-
SHA512
d11e0d6c08ff0528843fd356ed8fc375bf72b205911b87bf2ec87427e323c895ecfb74eedd1bb470e99fae5d52fac94da075d7f6e48743d9abb2f9301f51dc0a
-
SSDEEP
12288:juOFip38seQG4Tmv8FjLasGYxauTeY/K2v:juOcZIJScYxaAeYS2
Malware Config
Signatures
Files
-
279229bcd93298360019fd898ca2285149dbd496a96b29c24a193e477ff31fe5.exe windows x86
64448d306d852bc270bb9cc6b3ccd706
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
kernel32
GetStartupInfoA
WriteConsoleW
GetFileSize
GetCurrentProcessId
GetFileTime
GetCommandLineW
GetProcAddress
SetSystemTimeAdjustment
GetSystemTimeAsFileTime
SetSystemPowerState
GetLocalTime
DeleteCriticalSection
FindCloseChangeNotification
FormatMessageW
FindNextChangeNotification
GetModuleFileNameW
GetCPInfo
LoadLibraryW
GetLogicalDriveStringsW
CreateFileW
FindFirstChangeNotificationW
CloseHandle
SetEndOfFile
VirtualProtect
Sleep
FreeLibrary
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
CreateFileA
SetStdHandle
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ