Static task
static1
Behavioral task
behavioral1
Sample
f09501502b530c6110f040db7dab0702c061ebfeb33d882f70462086e2bc6ad7.exe
Resource
win7-20221111-en
General
-
Target
f09501502b530c6110f040db7dab0702c061ebfeb33d882f70462086e2bc6ad7
-
Size
1.2MB
-
MD5
c645d0b4fd2a6cda321f22ca63c0c9e4
-
SHA1
f399b4c706c0a5d9e9005d26b3059385065bbe58
-
SHA256
f09501502b530c6110f040db7dab0702c061ebfeb33d882f70462086e2bc6ad7
-
SHA512
80b1307bcacf85dc96d6bdea0757c008275ac0c5a00654a6a8db447da11c4f25f61f1d54e2045a1b3c06cea5eeaa7e7680c6e30836c3b2cbd8a3e44758c95401
-
SSDEEP
12288:cU4GKjTbx62TWGnujqU0z0gIlGYTbRliQHaUVPgCwUyzcdqPtoDC5n0I:cU4tjTF62mqtzlIlRZ6UNgC70P+Dm0I
Malware Config
Signatures
Files
-
f09501502b530c6110f040db7dab0702c061ebfeb33d882f70462086e2bc6ad7.exe windows x86
ad069c0cac3de276c7e958e4818b1e71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
LCMapStringW
LCMapStringA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
RaiseException
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetStringTypeA
GetStringTypeW
user32
FindWindowA
MessageBoxA
GetWindowThreadProcessId
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ