Static task
static1
Behavioral task
behavioral1
Sample
684a6176ab4b83981f9d5ed61844cdd3f6209c44ac16075606aeeb67f64071c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
684a6176ab4b83981f9d5ed61844cdd3f6209c44ac16075606aeeb67f64071c6.exe
Resource
win10v2004-20220812-en
General
-
Target
684a6176ab4b83981f9d5ed61844cdd3f6209c44ac16075606aeeb67f64071c6
-
Size
75KB
-
MD5
4d43c58ed36796f10b505c559cc2c0be
-
SHA1
ee0e4611455aa6a17850cdac31bdaa146a101544
-
SHA256
684a6176ab4b83981f9d5ed61844cdd3f6209c44ac16075606aeeb67f64071c6
-
SHA512
0e9d4d5a74ebccfd26e9bb2b99462adfc6121509b625e537287c5805f5169b6ce590361cc6ff62597e9d8583f221d49c8493da565e60b35841eab7c1806378e2
-
SSDEEP
768:XOGeTuBIDbpyTQD7kTbcKYU3r+/pP9ZKnfGxegjxIx80fogC8g5COUyQDUHxtfvT:WuBs6QsTbV3r+7QnfGHjeLfyAgQWxwQ
Malware Config
Signatures
Files
-
684a6176ab4b83981f9d5ed61844cdd3f6209c44ac16075606aeeb67f64071c6.exe windows x86
0ba6d71ad1633093da715e57abc205df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
LocalFileTimeToFileTime
GetSystemDefaultLCID
RtlMoveMemory
CreateFileMappingA
GetProcAddress
RaiseException
GetSystemTime
GetModuleHandleA
LoadResource
GetCurrentThread
GetVersion
GetCurrentProcess
GetThreadLocale
CreateDirectoryA
GetFileAttributesA
GlobalFree
GetTempPathW
SizeofResource
WaitForSingleObject
MoveFileA
lstrcmpiW
VirtualProtect
GetWindowsDirectoryA
GetTempPathA
DeleteFileA
SetThreadLocale
FileTimeToLocalFileTime
GetStartupInfoW
GetFileType
LCMapStringA
GetExitCodeProcess
GetConsoleOutputCP
msvcrt
__set_app_type
__p__commode
_initterm
__p___initenv
_except_handler3
_controlfp
_XcptFilter
_adjust_fdiv
__p__fmode
_exit
__getmainargs
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ