Static task
static1
Behavioral task
behavioral1
Sample
0d5570af30ffbaa3860deb8a00c61e24e77150f0e400c4e15056daa93191bf3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d5570af30ffbaa3860deb8a00c61e24e77150f0e400c4e15056daa93191bf3f.exe
Resource
win10v2004-20220812-en
General
-
Target
0d5570af30ffbaa3860deb8a00c61e24e77150f0e400c4e15056daa93191bf3f
-
Size
123KB
-
MD5
605e31126860334fde0195767cc85916
-
SHA1
81aaaa31f6fb4cabfe1495ca5dcbe4f256e83215
-
SHA256
0d5570af30ffbaa3860deb8a00c61e24e77150f0e400c4e15056daa93191bf3f
-
SHA512
2fee5c23a3456e70789caf60829b58bbabb091d99cca71f2bffd8c705b2f51c8b3ccbebb3b0dc4d4911cecf4532b15b130156bd6422b8f1dcaffba842a7abfe6
-
SSDEEP
1536:GJwrzoXhqp90h0NuwpxOkY9qbOLx5vYrQRtSedYYOi38Qsn29KzaUbZCIX9xfofN:G2rwPCN49H5vNRouYYh+290bBtS
Malware Config
Signatures
Files
-
0d5570af30ffbaa3860deb8a00c61e24e77150f0e400c4e15056daa93191bf3f.exe windows x86
ad5b115fcb0281d32e57a7aa9b832c7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
VirtualProtectEx
GetCommandLineW
CompareStringA
GetLocaleInfoA
DeleteFileA
LocalFileTimeToFileTime
GetProcessHeap
GetProcAddress
SetHandleCount
SetFileAttributesW
GlobalLock
CreateProcessA
FreeEnvironmentStringsA
GetLocaleInfoW
GetModuleHandleW
GetTempPathA
GetVersionExA
MulDiv
msvcrt
__set_app_type
_controlfp
_except_handler3
_exit
__setusermatherr
_XcptFilter
__p___initenv
_initterm
__p__fmode
__getmainargs
calloc
__p__commode
_adjust_fdiv
free
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE