Static task
static1
Behavioral task
behavioral1
Sample
252f9ac4608476ce05df4270ba906568eb356dee81c607baed6b32723d8280af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
252f9ac4608476ce05df4270ba906568eb356dee81c607baed6b32723d8280af.exe
Resource
win10v2004-20220812-en
General
-
Target
252f9ac4608476ce05df4270ba906568eb356dee81c607baed6b32723d8280af
-
Size
447KB
-
MD5
425b9b6aaf8b168b28f52cafc21b99f0
-
SHA1
e237eef3aeabf18afde26eb56b50b479d3d11677
-
SHA256
252f9ac4608476ce05df4270ba906568eb356dee81c607baed6b32723d8280af
-
SHA512
84f07f5886cd8c343924aa0ed5117b60d0d56d2bb5cbee10dfb1699a0bfc03256d7cbd54bbe5f158043fbcc4dcc4a931c2f18ccb395e65b4d375c18e07fd0478
-
SSDEEP
12288:+GmIctrniyfrkyy9nXOkMIH4dCCK3x9zZaCNl+dwYfeFV:3mIUniGkJXOkMW4dCCmx6Q8drIV
Malware Config
Signatures
Files
-
252f9ac4608476ce05df4270ba906568eb356dee81c607baed6b32723d8280af.exe windows x86
c226a5dd365a52e9d0448f592c93c154
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SafeArrayGetRecordInfo
ntdll
RtlReleaseResource
kernel32
GetUserDefaultLangID
GetCommandLineA
user32
GetMessagePos
Sections
.text Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE