Static task
static1
Behavioral task
behavioral1
Sample
914aa236092fc97d9ff86faf25248a57dbc902e1ca0a9da9336b7f4ebce1f650.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
914aa236092fc97d9ff86faf25248a57dbc902e1ca0a9da9336b7f4ebce1f650.exe
Resource
win10v2004-20220812-en
General
-
Target
914aa236092fc97d9ff86faf25248a57dbc902e1ca0a9da9336b7f4ebce1f650
-
Size
112KB
-
MD5
45538b860b09ba1fdeedf3517a70c4f1
-
SHA1
4aeed7347cfca20f46ebd4d28eb9948be7cf9828
-
SHA256
914aa236092fc97d9ff86faf25248a57dbc902e1ca0a9da9336b7f4ebce1f650
-
SHA512
6e44699a0a7f5570a683c38c4d01a4b3d275d415cbc7cb369b00beda4005a4dab8d3008c51aaf93a5043d2228a0b06014b5d941f8813a87b6565d862763ca905
-
SSDEEP
1536:+EO24d46ZRLFwFb2Ds4cnl+Dwe8Qwm4EFzJtjybUq3x5r:zUdxJDsLnlywmVhyd
Malware Config
Signatures
Files
-
914aa236092fc97d9ff86faf25248a57dbc902e1ca0a9da9336b7f4ebce1f650.exe windows x86
f227d7dafab8ed2cb97c27ac1c08f26b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetStdHandle
MultiByteToWideChar
DuplicateHandle
GetModuleHandleA
GetSystemDirectoryW
GlobalHandle
LoadResource
lstrcatA
VirtualProtect
LocalAlloc
GetWindowsDirectoryA
GetEnvironmentVariableA
DeleteFileA
RtlMoveMemory
GetCurrentThread
GetCommandLineA
GetTempPathA
GlobalFree
GetProcAddress
GetSystemTimeAsFileTime
SizeofResource
lstrcpyA
GetThreadLocale
GetFileTime
msvcrt
__p__fmode
_except_handler3
_exit
_controlfp
__p___initenv
_XcptFilter
__p__commode
__set_app_type
__getmainargs
_initterm
_adjust_fdiv
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Itamo Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ