Static task
static1
Behavioral task
behavioral1
Sample
76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a.exe
Resource
win10v2004-20221111-en
General
-
Target
76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a
-
Size
726KB
-
MD5
e9cd494b249cea7b968fa89f1e7d40de
-
SHA1
fd514fe256f815cfecf67fb57e16d106443d90dc
-
SHA256
76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a
-
SHA512
2689268a8fd96fa0e9b65f245bb3ab4ca860e7aa017e930c14d58bbe0ffc52ecb050de43865ebd8b7ff56270075d4a071caed81dff3c4d01c482d183482ff53a
-
SSDEEP
12288:xBnDWIk+GOifTjyBImx5MKJ5nJDLWrutVPIEwSdbE0HD1s:x5Vk+vibuIm8qZJfWyPwENdf
Malware Config
Signatures
Files
-
76487462acfa06bc90bda7d72bee7f88ea2e70d838a50d9012362958ad93f02a.exe windows x86
45d5af0a54bdb03f33a9ff8e60c2afa6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
CreateDirectoryW
PrepareTape
VirtualFree
GetFileSize
ResetEvent
GetProcessHeap
DeleteCriticalSection
SetSystemPowerState
GetVolumeInformationW
VirtualAlloc
FileTimeToSystemTime
GetSystemTimeAsFileTime
ReadFile
CloseHandle
CreateFileW
GetLogicalDriveStringsW
GetCPInfo
VirtualProtect
GetVersion
CreateEventW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetVersionExA
GetStartupInfoW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
HeapReAlloc
HeapDestroy
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Sections
.text Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ