Static task
static1
Behavioral task
behavioral1
Sample
f524f1b36c0977f36c15a0d4f7a7b1a78d73c667c419c0d8f6ea8f5d35cb040b.exe
Resource
win7-20220812-en
General
-
Target
f524f1b36c0977f36c15a0d4f7a7b1a78d73c667c419c0d8f6ea8f5d35cb040b
-
Size
389KB
-
MD5
44be29f905e5808121245b05ce13c970
-
SHA1
044875808fb93953dc25e8a2998cb3a33d0522a3
-
SHA256
f524f1b36c0977f36c15a0d4f7a7b1a78d73c667c419c0d8f6ea8f5d35cb040b
-
SHA512
0415f486023c6c63f3ca04a097df8a9577106a4fbbc3590de223511b8d7e5a7313b56e32b6e9cf95417c597ffeaef549fe8578173db6046b8d05b1ec7f7d5508
-
SSDEEP
3072:VTlmPVcdgJs8HjfYv27XaaHw7Koj4rt032QdMTPmb3HwInv4JMke9PkvDnM8ua7:VTMPVcdgnDfYe7G2QdDb3Uh7
Malware Config
Signatures
Files
-
f524f1b36c0977f36c15a0d4f7a7b1a78d73c667c419c0d8f6ea8f5d35cb040b.exe windows x86
977f74ad05a84dec1158a6588a55b9d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GlobalCompact
GetBinaryTypeW
GetProfileStringW
GetProfileStringW
netapi32
NetUserGetInfo
NetUserGetInfo
NetApiBufferFree
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
OleUninitialize
setupapi
SetupCloseInfFile
SetupQueryFileLogA
SetupInitializeFileLogA
SetupCloseLog
SetupOpenLog
SetupRemoveFileLogEntryA
SetupGetFileCompressionInfoA
SetupGetInfFileListA
SetupScanFileQueueA
SetupInstallFilesFromInfSectionA
SetupOpenAppendInfFileA
SetupOpenFileQueue
SetupGetSourceFileLocationA
SetupGetSourceFileSizeA
Sections
.text Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE