Static task
static1
Behavioral task
behavioral1
Sample
358621cf227c3d82216e6c1cd727bae4cd7dfa14c6debab1d42f501fb4e8c0d3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
358621cf227c3d82216e6c1cd727bae4cd7dfa14c6debab1d42f501fb4e8c0d3.exe
Resource
win10v2004-20220812-en
General
-
Target
358621cf227c3d82216e6c1cd727bae4cd7dfa14c6debab1d42f501fb4e8c0d3
-
Size
257KB
-
MD5
016dd45db5a77e3eeccc0fda7688065e
-
SHA1
a130be8486ed1501a8f5d8157c79813b9dafd6ac
-
SHA256
358621cf227c3d82216e6c1cd727bae4cd7dfa14c6debab1d42f501fb4e8c0d3
-
SHA512
dbee83c9e85c63f70e350b7bae1284cd2b4109b2a4ba4533166ee3ab80ebfc51c26a925132570a398f3b517c2b9b62ea31a06e4d1f37899cac0bdfb8505ffb2b
-
SSDEEP
3072:67nwen1WcXxDgO1iHG5h9ZyMI4woLScmdjBysnYD/b5jF8smZk1IorizKc5IchEa:LexxDgO1iCOx43H9br8suYA1dTvC9R
Malware Config
Signatures
Files
-
358621cf227c3d82216e6c1cd727bae4cd7dfa14c6debab1d42f501fb4e8c0d3.exe windows x86
3769459d1f4a97bf117627d15206fbde
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
ExitProcess
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeW
user32
SetWindowWord
DispatchMessageW
GetTabbedTextExtentA
MapWindowPoints
FindWindowA
oleaut32
BstrFromVector
CreateDispTypeInfo
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ