Static task
static1
Behavioral task
behavioral1
Sample
f191d9c4b45cdffa261d3f1dbb5a2d122eeac6f69ffb46f9ad47167e7f59f884.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f191d9c4b45cdffa261d3f1dbb5a2d122eeac6f69ffb46f9ad47167e7f59f884.exe
Resource
win10v2004-20220901-en
General
-
Target
f191d9c4b45cdffa261d3f1dbb5a2d122eeac6f69ffb46f9ad47167e7f59f884
-
Size
32KB
-
MD5
6ed832135c5d74deef4f7292f08ef9ac
-
SHA1
dd9d489d7488aa462b29df01f4862a15dbf407eb
-
SHA256
f191d9c4b45cdffa261d3f1dbb5a2d122eeac6f69ffb46f9ad47167e7f59f884
-
SHA512
f4c3cf8e2a0f4542295ff0642757f107a2ff0611ee898f206bc0c6f0b5aa12329714a957bc9e8859248357055a7d62fbbc23af7bd0bd895b4ccc9e576f287808
-
SSDEEP
768:Ax3gXoXis/1AA4aNknjTJlPbna+bgFYpD0+fvEYXP8NXmR6jg:ARyUp4aC//Pbna+bsYpDxEYXENXWY
Malware Config
Signatures
Files
-
f191d9c4b45cdffa261d3f1dbb5a2d122eeac6f69ffb46f9ad47167e7f59f884.exe windows x86
964bb72e31836ce79fd1cf3f6414fbe7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
SetEvent
ExitProcess
WaitForSingleObject
WinExec
GetLastError
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateMutexA
GetWindowsDirectoryA
GetModuleFileNameA
msvcrt
sprintf
_mbsupr
_ltoa
strlen
_except_handler3
_mbsrchr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
rpcrt4
UuidToStringA
UuidCreate
RpcStringFreeA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ