Static task
static1
Behavioral task
behavioral1
Sample
0711911c05c3539083401c7ba6d386d696fb599705a425de4dd4457d561a1218.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0711911c05c3539083401c7ba6d386d696fb599705a425de4dd4457d561a1218.exe
Resource
win10v2004-20220812-en
General
-
Target
0711911c05c3539083401c7ba6d386d696fb599705a425de4dd4457d561a1218
-
Size
244KB
-
MD5
50efd6ab02714716d61b791f4de86f76
-
SHA1
79bb13c4777e567d17bcabedc7a85f2be67487c0
-
SHA256
0711911c05c3539083401c7ba6d386d696fb599705a425de4dd4457d561a1218
-
SHA512
5de206c87a4c08adebb05c1b708da681e733575b130d5dd565034f2872a539b3c4c21f622acad80f2eb21a5b68b995be6afee57a21565ea0a318652a895c60af
-
SSDEEP
3072:RotdobXOSMQgRnJ5mw/G0jgVxBDCH7OgtBLfkajaAXjBjsPVHDJA6u8kAcK:C4XdgRnrmIjm347FLfPFsVHDqj8
Malware Config
Signatures
Files
-
0711911c05c3539083401c7ba6d386d696fb599705a425de4dd4457d561a1218.exe windows x86
83b1ab806f5758d79a393d7858f61fab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
MultiByteToWideChar
ReadFile
GetLocalTime
GetModuleFileNameA
FreeLibrary
LoadLibraryA
LCMapStringA
GetProcAddress
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
CreateFileA
SetStdHandle
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
GetStringTypeW
user32
wsprintfA
resultcsv
InitFile
AddData
cfgmgr32
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
CM_Locate_DevNodeA
CM_Get_DevNode_Status
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE