Static task
static1
Behavioral task
behavioral1
Sample
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe
Resource
win10v2004-20221111-en
General
-
Target
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6
-
Size
360KB
-
MD5
1532b50d1cbedc84ea88de49ec5313dc
-
SHA1
39911133ed848fd48a9396a18c8201679db8054c
-
SHA256
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6
-
SHA512
364dbc21cc3bb6e210f3afe831bdbe5bd9fe99c0a2fc875d77d5ed1538eecfa89bcd41a22fc887be20031ce64ca230ad4181c9f72c0b1af842a70f72a557716d
-
SSDEEP
6144:j/7v3tUUIv+3UYI4bLQGKDpXbu2DCfCOrtVrv6k4M6:jGUIv+3JIMkGCpLuWCf13rP
Malware Config
Signatures
Files
-
a549c3792817c3465bcbdf5252f0e1d39ff9cbb87849414282a9bb68963614c6.exe windows x86
184c9e528d7de35e241517841306f09e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
GetSystemDirectoryW
Sleep
SizeofResource
GetFileAttributesW
TerminateProcess
GetModuleFileNameW
CreateFileW
GetLastError
MoveFileW
Process32FirstW
GetProcessHeap
SetCurrentDirectoryW
Process32NextW
CreateToolhelp32Snapshot
ReleaseMutex
GetDiskFreeSpaceExW
CloseHandle
DeleteFileW
CreateThread
OpenMutexW
GetExitCodeThread
GetTickCount
GetModuleHandleW
WaitForSingleObject
HeapFree
HeapAlloc
CreateProcessW
LoadResource
FindResourceW
FreeResource
LockResource
CreateMutexW
SetEndOfFile
CreateFileA
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStringTypeA
SetFilePointer
HeapSize
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
user32
SetCursorPos
shell32
ShellExecuteW
wininet
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ