Behavioral task
behavioral1
Sample
1f8595d066ee69e7454b30b718102bbd04122ba8a5bab1e9d5f4532b7a7305a3.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1f8595d066ee69e7454b30b718102bbd04122ba8a5bab1e9d5f4532b7a7305a3.exe
Resource
win10v2004-20220414-en
General
-
Target
1f8595d066ee69e7454b30b718102bbd04122ba8a5bab1e9d5f4532b7a7305a3
-
Size
40KB
-
MD5
b808bcbb1d9b94a4a71899964255ce0e
-
SHA1
c5e899db34a976f8396cdde8044ebb5ca67a513f
-
SHA256
1f8595d066ee69e7454b30b718102bbd04122ba8a5bab1e9d5f4532b7a7305a3
-
SHA512
6f1c8f6fd0ad1ded7a5ab3e39a45f0ca22bc12100117b3a58f613184069128e7e21b7685262f3647408c6871ea8a5e2a07e53379634f65a45b71552d69620ff9
-
SSDEEP
768:8GsFo1b76l7V/x7kt794oT0zNvYrCxyfFXEU7:8GsFo1b76HxYtyooyeGEU7
Malware Config
Extracted
buer
frrnq8--imp_j_i,fi-
Signatures
Files
-
1f8595d066ee69e7454b30b718102bbd04122ba8a5bab1e9d5f4532b7a7305a3.exe windows x86
bbbcb3d0d8904a4dcc2ee78920bd4d96
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
towlower
iswctype
strlen
strtoul
strncmp
strstr
strchr
_chkstk
wcscmp
wcslen
wcscpy
_allmul
memset
kernel32
HeapAlloc
GetTickCount
GetProcessHeap
HeapSize
HeapFree
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
iatnames Size: 200B - Virtual size: 512B