Static task
static1
Behavioral task
behavioral1
Sample
af9fcfb57731dacde47948dbc88506667d974854a03d90a8ce2b38fa44341b21.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af9fcfb57731dacde47948dbc88506667d974854a03d90a8ce2b38fa44341b21.exe
Resource
win10v2004-20220901-en
General
-
Target
af9fcfb57731dacde47948dbc88506667d974854a03d90a8ce2b38fa44341b21
-
Size
18KB
-
MD5
ebef3481685051c9c4cb1cca479da3bb
-
SHA1
d736165fb2d74b9b4804795faeaee63007e1e031
-
SHA256
af9fcfb57731dacde47948dbc88506667d974854a03d90a8ce2b38fa44341b21
-
SHA512
a16e6f5361d42d01028977b411b5a95730de27f4698ba4d96549b067753f09461176fe935a6c389d3869c4f4ccdf990e5aca0962ec577275486f2ff904a281bb
-
SSDEEP
384:JASpwkvDxbcrkdlwBPu5xNdejiH5Npzs:JdpwkvDxbukdlkPuLNde2ds
Malware Config
Signatures
Files
-
af9fcfb57731dacde47948dbc88506667d974854a03d90a8ce2b38fa44341b21.exe windows x86
351cc07e6517a5f8579259e0495feaf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcessHeap
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 586B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ