Static task
static1
Behavioral task
behavioral1
Sample
24c4055e7026e56ea1fd3a2af9c3d93b82f301f9709130c45ca2864a5019e389.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
24c4055e7026e56ea1fd3a2af9c3d93b82f301f9709130c45ca2864a5019e389.exe
Resource
win10v2004-20220812-en
General
-
Target
24c4055e7026e56ea1fd3a2af9c3d93b82f301f9709130c45ca2864a5019e389
-
Size
105KB
-
MD5
3a78343d77cc77f53ed03c2e2861a342
-
SHA1
158624814d3b24cd91258d442354b78d15b8c95f
-
SHA256
24c4055e7026e56ea1fd3a2af9c3d93b82f301f9709130c45ca2864a5019e389
-
SHA512
1c494a2507d4f20b349b6bd8ba092f69881a57973aaf2a1da9d03a936893af650343b57cd481e715728905267488b49a84e3d47d7796b3e2df77a4c064ccb684
-
SSDEEP
1536:Ynjkn3+UVFyQ+UhnBUinq3wD+EHddevSi/5BJoQnG9VGjVNu2aZUmqGlfe6P:Yn4n3fKCBUinq0KLPmrVGj63ZhdP
Malware Config
Signatures
Files
-
24c4055e7026e56ea1fd3a2af9c3d93b82f301f9709130c45ca2864a5019e389.exe windows x86
5d84accb8e87c5769ba2998ec4574d4e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
GetThreadLocale
IsDebuggerPresent
GetStringTypeW
CompareStringW
SizeofResource
GetEnvironmentVariableA
OpenProcess
MultiByteToWideChar
DuplicateHandle
DeleteFileA
GetModuleHandleA
GetLocaleInfoW
InterlockedCompareExchange
GetStartupInfoA
LoadResource
GetProcAddress
RtlMoveMemory
ExpandEnvironmentStringsA
FreeEnvironmentStringsA
GlobalUnlock
GetTempPathA
RemoveDirectoryA
SetFileTime
IsBadCodePtr
WaitForSingleObject
VirtualProtect
GetStringTypeExA
lstrcatA
GlobalFree
SetStdHandle
GetCurrentProcess
msvcrt
_adjust_fdiv
__p__fmode
_except_handler3
_XcptFilter
_controlfp
__getmainargs
_initterm
__set_app_type
_exit
__p__commode
tan
__p___initenv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Axef Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ