Static task
static1
Behavioral task
behavioral1
Sample
f603f9175d7ccba684e48a72eee4f52cce5213bb95cd100c2a9ff13b9418683d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f603f9175d7ccba684e48a72eee4f52cce5213bb95cd100c2a9ff13b9418683d.exe
Resource
win10v2004-20220812-en
General
-
Target
f603f9175d7ccba684e48a72eee4f52cce5213bb95cd100c2a9ff13b9418683d
-
Size
66KB
-
MD5
65a96164316bfc360d92ed6a32384664
-
SHA1
201bbd95163877a098836838656e01bd3d14dde4
-
SHA256
f603f9175d7ccba684e48a72eee4f52cce5213bb95cd100c2a9ff13b9418683d
-
SHA512
f0331baed2ec2a3e4f900cb586212336418760fad40b31e91279a80f5f2179c76007e94fc0caf09981ec25b9766c302a9ed6b95795b526ab276dcddcfbe452ff
-
SSDEEP
1536:wTuIXDLAkhB/c1J4iEb6fydpXz+mE9Hdc2oZYP86icz8uiLS7v4:wSIXDckhB/c1yiW6fi1+bJoiP86i5un
Malware Config
Signatures
Files
-
f603f9175d7ccba684e48a72eee4f52cce5213bb95cd100c2a9ff13b9418683d.exe windows x86
45f6dc43f354ce8e8edd786e896ff4ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemGeoID
CreateMemoryResourceNotification
GetLocaleInfoW
ExpandEnvironmentStringsA
GetHandleContext
ExpandEnvironmentStringsW
SetThreadAffinityMask
RtlUnwind
HeapQueryInformation
GetBinaryTypeW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE