Static task
static1
Behavioral task
behavioral1
Sample
c2f516a3e99fda53b917c4609b5507f4343050f4055481029557d53ea8ae64c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2f516a3e99fda53b917c4609b5507f4343050f4055481029557d53ea8ae64c4.exe
Resource
win10v2004-20220812-en
General
-
Target
c2f516a3e99fda53b917c4609b5507f4343050f4055481029557d53ea8ae64c4
-
Size
37KB
-
MD5
48d44ca3926f7fc216ebeef291c19022
-
SHA1
310fccb226480f0327ac666b7f3d79cbb1f51202
-
SHA256
c2f516a3e99fda53b917c4609b5507f4343050f4055481029557d53ea8ae64c4
-
SHA512
40e421c38d71403aa5bd1ef87664c24dd889d4c26b79f5975c261a5639961f75c4bdff19d42c8b125e1a6db46f3bdf78c0459eb1c8b8476f56dc33a2c60586d4
-
SSDEEP
384:XAhbdTMESKyrxcgFymlFWVEMKCZkkMvMyT/H1b2F18oBJdvur6:aMESrxVyEPCkEEw18olB
Malware Config
Signatures
Files
-
c2f516a3e99fda53b917c4609b5507f4343050f4055481029557d53ea8ae64c4.exe windows x86
1c264e3652590a8504b33a9551cf73b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
ReadFile
SetEndOfFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
FlushFileBuffers
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
LoadLibraryA
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
CreateFileA
HeapReAlloc
SetStdHandle
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
user32
GetKeyState
SetWindowsHookExA
GetMessageA
MapVirtualKeyA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CallNextHookEx
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE