Static task
static1
Behavioral task
behavioral1
Sample
56a771024f52f1dbfc744973754b637251568f3840654a59e92e2b046c954434.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56a771024f52f1dbfc744973754b637251568f3840654a59e92e2b046c954434.exe
Resource
win10v2004-20220812-en
General
-
Target
56a771024f52f1dbfc744973754b637251568f3840654a59e92e2b046c954434
-
Size
204KB
-
MD5
8f125c4e5cb8d95840b30da349ab7e0b
-
SHA1
83de7f750074432b990f8fc290b7c242c7caa5c5
-
SHA256
56a771024f52f1dbfc744973754b637251568f3840654a59e92e2b046c954434
-
SHA512
b8daa8511f874a3026fd3126f40a41d2d241cbe8956c2ec52be373c7c9a8deec0992bbdff7ca54f63a7b2ad76fe50374d2bd74879fb95e8788ff45b03eda6cc5
-
SSDEEP
3072:Dd+UhDtI0eIrC3qDCC4t2s4XQcVJJw1FIdLB8/mfwYHMXT6RLIwxJ:DHI0Ju3qDZ4th4XpJcFoBcm4dDUJ
Malware Config
Signatures
Files
-
56a771024f52f1dbfc744973754b637251568f3840654a59e92e2b046c954434.exe windows x86
a8f1549446af0e7c881c34eb90006582
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameA
shell32
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
Shell_NotifyIconA
SHFileOperationA
kernel32
GetACP
GetCommandLineW
GetModuleHandleA
GetProcAddress
ExitThread
ExitProcess
IsBadHugeReadPtr
GetOEMCP
GetCommandLineA
GetLastError
VirtualAllocEx
lstrlenA
LoadLibraryExA
IsBadReadPtr
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 547B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ