Static task
static1
Behavioral task
behavioral1
Sample
application.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
application.exe
Resource
win10v2004-20230220-en
General
-
Target
application.exe
-
Size
209KB
-
MD5
168c3c354d623c25dc05d0278c086d63
-
SHA1
04cd8e2c11b734497773bf6b22e00c15cdc4a724
-
SHA256
fe99a49596fc6f841b7605021da6fce7f6c817d5247d880227f790388a7cabe4
-
SHA512
2ad89dae4bece6a45f5f888a792c29a627e4d189feca30a908c31c4fc64f1a98b0d87f416db64d51646a74cf5dd392c7de671ab90fe6f2b9467929d80c121e07
-
SSDEEP
6144:cC1N40Fnr0602TzhldWqIk6jKSxPMkPOR0:cC1VFng60OCHNMNK
Malware Config
Signatures
Files
-
application.exe.exe windows x86
e382229cbe1cfe84b080e0a3eda013fc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateIoCompletionPort
CloseHandle
GetLastError
GetQueuedCompletionStatus
IsBadReadPtr
VirtualQuery
GetSystemInfo
IsBadStringPtrA
IsBadCodePtr
HeapCreate
InterlockedIncrement
GetProcessHeap
HeapDestroy
ExitProcess
GetTickCount
lstrlenA
HeapFree
HeapReAlloc
GetModuleHandleA
HeapAlloc
LoadLibraryA
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetStartupInfoA
GetCommandLineA
GetVersion
InterlockedDecrement
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
VirtualFree
RtlUnwind
WriteFile
user32
PeekMessageW
CreateDialogParamW
DrawTextW
IsDialogMessageW
ShowWindow
TranslateMessage
DispatchMessageW
gdi32
DeleteObject
CreateBitmap
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
DeleteDC
BitBlt
ole32
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitializeEx
shell32
DragQueryFileW
DragAcceptFiles
DragFinish
CommandLineToArgvW
winmm
timeEndPeriod
timeGetTime
timeBeginPeriod
Sections
.text Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ