Static task
static1
Behavioral task
behavioral1
Sample
d8198ce49c7a82197efc891057d110792d5829e05d69d5b34ea0197b7daaa06d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8198ce49c7a82197efc891057d110792d5829e05d69d5b34ea0197b7daaa06d.exe
Resource
win10v2004-20220901-en
General
-
Target
d8198ce49c7a82197efc891057d110792d5829e05d69d5b34ea0197b7daaa06d
-
Size
240KB
-
MD5
65b9bdbb52ae81872f726f56f0ced080
-
SHA1
ee1e0d49d91299038a3027c0c62b95c38c7fe584
-
SHA256
d8198ce49c7a82197efc891057d110792d5829e05d69d5b34ea0197b7daaa06d
-
SHA512
4d467c13262e0747ef96ea59aaf623948c83a16fe27d8f4c048485735601b4d9ac968423fbb0cae3b3444a9ca4c101a183620b77989ac60ace6e503fb1aa3479
-
SSDEEP
6144:+oo1syl+/yW1QOzn4t8mj3qcg2wUYgeVqA6jspmxvknTEbVt:+o4Nl+6Ejq8mj1g2pYg9AwFknTEbn
Malware Config
Signatures
Files
-
d8198ce49c7a82197efc891057d110792d5829e05d69d5b34ea0197b7daaa06d.exe windows x86
da0f42325b4dd1df9374f4fca9b18aac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
GetProcAddress
lstrcmpiA
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
CloseHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetFilePointer
msacm32
acmMetrics
icm32
ord13
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 232KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ