Static task
static1
Behavioral task
behavioral1
Sample
32175334838d6161916a495234e3eb152ab80229a8096e4d28862b6d060947f3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
32175334838d6161916a495234e3eb152ab80229a8096e4d28862b6d060947f3.exe
Resource
win10v2004-20220812-en
General
-
Target
32175334838d6161916a495234e3eb152ab80229a8096e4d28862b6d060947f3
-
Size
363KB
-
MD5
6f7e1276310f4056a68d8ccb344ec6c0
-
SHA1
c6d802399bcc5acbad298a09d155873316836a19
-
SHA256
32175334838d6161916a495234e3eb152ab80229a8096e4d28862b6d060947f3
-
SHA512
dabd7f46b8ea60b0121c3dcb58af35ca76ce9382b2bc47d80b6df0baa3e7dbc394dae58b75dcd7d8509b7fe4fa8b374741c1f0f369f4a030faa98f5965e11c2c
-
SSDEEP
6144:wA9erugzk5oRcmUDrUh5/AxC5xUdDHUxb6PoBzBStT:ZeSgqnvUv/sC5aIb
Malware Config
Signatures
Files
-
32175334838d6161916a495234e3eb152ab80229a8096e4d28862b6d060947f3.exe windows x86
67db2c26b3136413f0c21c19b75512e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
HeapFree
LocalReAlloc
MultiByteToWideChar
SetCurrentDirectoryA
GetProcAddress
lstrcatA
lstrcpyA
lstrcpynA
VirtualAllocEx
GetModuleHandleA
GetCommandLineA
FreeLibrary
SetErrorMode
ExitProcess
user32
LoadIconW
LoadCursorW
gdi32
GetStockObject
advapi32
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata4 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ