Static task
static1
Behavioral task
behavioral1
Sample
0f6202a514ff742fab65db1e229dedd9653e06bb7999cd63789e29acf0106214.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f6202a514ff742fab65db1e229dedd9653e06bb7999cd63789e29acf0106214.exe
Resource
win10v2004-20220812-en
General
-
Target
0f6202a514ff742fab65db1e229dedd9653e06bb7999cd63789e29acf0106214
-
Size
82KB
-
MD5
f892f64e13adcc813f904e3b6b95e2a2
-
SHA1
261eda0a4d355f303cf75aa651e026b29b97dca7
-
SHA256
0f6202a514ff742fab65db1e229dedd9653e06bb7999cd63789e29acf0106214
-
SHA512
1f274e691aa5906d9148bdd3c60780ecf622e2378155a60f4bb6db0652291fe059adb8d1b6d28a8af2d25954568f9d2dac89556308e97869d3bd179e6da98c1b
-
SSDEEP
1536:eRCGsy9qE/Urd7JMy4coCCP355Lq8rhk8y:+CGGuUBFXoCCPTLdrRy
Malware Config
Signatures
Files
-
0f6202a514ff742fab65db1e229dedd9653e06bb7999cd63789e29acf0106214.exe windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE