Static task
static1
Behavioral task
behavioral1
Sample
02955fa1236b1f61d5ba889da0f7363aba152762ddc82f7efd143af27bf570b9.exe
Resource
win7-20230220-en
General
-
Target
02955fa1236b1f61d5ba889da0f7363aba152762ddc82f7efd143af27bf570b9
-
Size
348KB
-
MD5
ed8aa31ec33806990a1b743b7eb99520
-
SHA1
47e1ed67a0a9043a16e88fed151ca56fb7ed2ee5
-
SHA256
02955fa1236b1f61d5ba889da0f7363aba152762ddc82f7efd143af27bf570b9
-
SHA512
43ddb8980ddfadad29b25926c1b6c5ed53827d96a4eb241a9fc97cb23051564eed5b75ef51dd4d8fc8afce4210f839d289c8a48b7414843f405e60f66ea41a6c
-
SSDEEP
6144:87a7bE69lgMMMMMgMoJMMMMMMdMMMMMMMMMYI1mVVrXnVhbxGEhj63XjeUqO4BQy:87ar9SJMMMMMMdMMMMMMMMMYI1mVVzVx
Malware Config
Signatures
Files
-
02955fa1236b1f61d5ba889da0f7363aba152762ddc82f7efd143af27bf570b9.exe windows x86
1e14b9e859467fd4c1b3bb619c1a4550
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
lstrlenA
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
VirtualAlloc
SizeofResource
LoadResource
FindResourceW
CreateFileW
HeapSize
FlushFileBuffers
HeapReAlloc
HeapAlloc
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
IsProcessorFeaturePresent
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapFree
Sleep
MultiByteToWideChar
RtlUnwind
CloseHandle
shlwapi
SHStrDupW
PathRemoveFileSpecW
PathAppendW
PathRemoveBackslashW
PathIsUNCW
mpr
WNetGetUniversalNameW
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ