Static task
static1
Behavioral task
behavioral1
Sample
0156f3781c9169d1a6cfb79503b98cfda8f54ff10699c6cd64d6130d6e017f63.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0156f3781c9169d1a6cfb79503b98cfda8f54ff10699c6cd64d6130d6e017f63.exe
Resource
win10v2004-20220812-en
General
-
Target
0156f3781c9169d1a6cfb79503b98cfda8f54ff10699c6cd64d6130d6e017f63
-
Size
356KB
-
MD5
f8204affab61998110eaaff0878957ae
-
SHA1
5f1478596a0ec06a2eb331a7891c70809b4ba2a1
-
SHA256
0156f3781c9169d1a6cfb79503b98cfda8f54ff10699c6cd64d6130d6e017f63
-
SHA512
0f4edfd45cad885fb2bf1912959b841f91639e9860ef131607fc0e27e110d29a4365cd2dce0cdd760469eca6bb9f114483174fed0fb0fc3e794bf405e9e1672f
-
SSDEEP
6144:I1qZp46dbzu2xFFImpqCA825dsm6FmfIOwQ8:TLr9FE82rEmsQ
Malware Config
Signatures
Files
-
0156f3781c9169d1a6cfb79503b98cfda8f54ff10699c6cd64d6130d6e017f63.exe windows x86
b834d456617660490ba2fc6d356308d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
HeapDestroy
GetCommandLineA
GetTickCount
GetLastError
GetCurrentThread
GetVersion
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
HeapAlloc
GetProcessHeap
GetStartupInfoA
msvcrt
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_strcmpi
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
gmygm Size: 316KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wucwmc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iesass Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE