Static task
static1
Behavioral task
behavioral1
Sample
df2428d3b8b60dfd1a21619e6174cfb049a20156a868d672f0268c4dc2a14899.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df2428d3b8b60dfd1a21619e6174cfb049a20156a868d672f0268c4dc2a14899.exe
Resource
win10v2004-20220812-en
General
-
Target
df2428d3b8b60dfd1a21619e6174cfb049a20156a868d672f0268c4dc2a14899
-
Size
136KB
-
MD5
657f7fcb3cd9a8a7b6dbd8516a994c60
-
SHA1
e66db9c79a45b62b0a6ecbfc5742b353f571a71d
-
SHA256
df2428d3b8b60dfd1a21619e6174cfb049a20156a868d672f0268c4dc2a14899
-
SHA512
04c4baf9183875b80c4072bbd8ff7ee92e57776833d141d576628b47269cfa27ee320d140313ff30fa03003765db0d4cda30b4e1241ea131102a372da9159f19
-
SSDEEP
3072:+YAf5zKL4yg6n6k+FqLo9e+9lqOLVrhqx:Rm5zo4yg6n6jgsldLVV0
Malware Config
Signatures
Files
-
df2428d3b8b60dfd1a21619e6174cfb049a20156a868d672f0268c4dc2a14899.exe windows x86
88808e21bd511c859f9429f9c7df9361
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW
user32
GetCursorInfo
crtdll
__GetMainArgs
exit
raise
signal
ulib
?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z
??0DSTRING@@QAE@XZ
??0PATH@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??1PROGRAM@@UAE@XZ
??1PATH_ARGUMENT@@UAE@XZ
ntdll
RtlFreeHeap
RtlAllocateHeap
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 349B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE