Static task
static1
Behavioral task
behavioral1
Sample
093e49694c967dbe0e558bd3bc23b4989aa634bcef38dff1d05ad6b6dc225d99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
093e49694c967dbe0e558bd3bc23b4989aa634bcef38dff1d05ad6b6dc225d99.exe
Resource
win10v2004-20220812-en
General
-
Target
093e49694c967dbe0e558bd3bc23b4989aa634bcef38dff1d05ad6b6dc225d99
-
Size
149KB
-
MD5
65878d01c01b3d48b7eeca343a16f9a0
-
SHA1
3dee16317dc48a945be6cf602bde6173299295a7
-
SHA256
093e49694c967dbe0e558bd3bc23b4989aa634bcef38dff1d05ad6b6dc225d99
-
SHA512
dbc1c25a1cd88ec8d94af87507eabf0ecd9e6e373fd2702fec2f296b34ec08f51af21c11e4f5c12d68b5c6a09d90b1b855691e1c493a010927d135c3e157b3bc
-
SSDEEP
3072:4IrmGslqd8JCXXKw4z3sjijtac5OfgszJijZF5O1Ml/vHQtEhhD:oGDBXuteJOUg/5D
Malware Config
Signatures
Files
-
093e49694c967dbe0e558bd3bc23b4989aa634bcef38dff1d05ad6b6dc225d99.exe windows x86
e5812e8c51857a9b70f467882b025b42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringA
kernel32
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleW
user32
GetWindow
crtdll
__GetMainArgs
exit
raise
signal
ulib
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 720B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 495B - Virtual size: 495B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE