Static task
static1
Behavioral task
behavioral1
Sample
1f4e0bb2739778995e9604af177a4f5e8785daca67d9ddfa48342ea2fee5d278.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f4e0bb2739778995e9604af177a4f5e8785daca67d9ddfa48342ea2fee5d278.exe
Resource
win10v2004-20220812-en
General
-
Target
1f4e0bb2739778995e9604af177a4f5e8785daca67d9ddfa48342ea2fee5d278
-
Size
358KB
-
MD5
6fa2ec1d26db9415857f6d87d4d0b020
-
SHA1
de264040c187c41635406377a08c0d493c3419c3
-
SHA256
1f4e0bb2739778995e9604af177a4f5e8785daca67d9ddfa48342ea2fee5d278
-
SHA512
8db07b52a058cf17ed15d902dc2a30785eabf060e85547c3d6f473c7219111dc0bf610d8b0fc05849bbd77d78834c2179128d96c6224be5900ec9b7ea7be1bb1
-
SSDEEP
6144:gNupu5mBtZj+VVXIVtcX/Q0awJ9n4svGj+08h0:gktBt9spIVKXJgyti
Malware Config
Signatures
Files
-
1f4e0bb2739778995e9604af177a4f5e8785daca67d9ddfa48342ea2fee5d278.exe windows x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pebundle Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE