Static task
static1
Behavioral task
behavioral1
Sample
399134438b986af18313d80aefb8df083e9be3b6c28402de1fc520b703c6989a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
399134438b986af18313d80aefb8df083e9be3b6c28402de1fc520b703c6989a.exe
Resource
win10v2004-20220901-en
General
-
Target
399134438b986af18313d80aefb8df083e9be3b6c28402de1fc520b703c6989a
-
Size
665KB
-
MD5
7ada0aa8e0c6465ec3233f6371de0af0
-
SHA1
9dfbef348d2b6ee983a31803a085cb3ca6cffc49
-
SHA256
399134438b986af18313d80aefb8df083e9be3b6c28402de1fc520b703c6989a
-
SHA512
4dc5a19d604aa23d3ede47f26c8efc960248ce43a2457660148eb43cde85c067f389750c0ec1261cd19ef3fadef3b63fd66e63dac906ab98ae03a58a3a319ff4
-
SSDEEP
12288:pk0AjYYKFaIfJznAUjH2u+fUMvU4Mw+I20VBXvrJYjVn5WcFrF:G0dlzAUj7+fzvuwP2OtTw5brF
Malware Config
Signatures
Files
-
399134438b986af18313d80aefb8df083e9be3b6c28402de1fc520b703c6989a.exe windows x86
ee28422e6323bd86cdc67323327b3ec1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpandEnvironmentStringsW
FormatMessageA
SwitchToThread
OpenProcess
CreateProcessA
CreateDirectoryA
CreateMutexW
GetDiskFreeSpaceExA
OpenFileMappingW
GetStringTypeA
GetPriorityClass
IsDBCSLeadByteEx
CreateNamedPipeW
DisconnectNamedPipe
GetFileTime
CreateFileMappingW
CreateWaitableTimerA
GetModuleHandleW
GetProcAddress
VirtualAlloc
EnumCalendarInfoExA
GetSystemDirectoryW
AreFileApisANSI
SetThreadExecutionState
SetConsoleTextAttribute
GetCurrentConsoleFont
GetModuleHandleA
msvcrt
_exit
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_c_exit
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 465KB - Virtual size: 903KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ