Static task
static1
Behavioral task
behavioral1
Sample
114489dd5e0ccaa5898852a3bc4dfc2fe6894f067d774756ac9c5c8821ad303a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
114489dd5e0ccaa5898852a3bc4dfc2fe6894f067d774756ac9c5c8821ad303a.exe
Resource
win10v2004-20220901-en
General
-
Target
114489dd5e0ccaa5898852a3bc4dfc2fe6894f067d774756ac9c5c8821ad303a
-
Size
127KB
-
MD5
62dce2dd6d7ceec82c63103896909984
-
SHA1
2d8481f5d5f18e693eb7ac5d12679e832bca5784
-
SHA256
114489dd5e0ccaa5898852a3bc4dfc2fe6894f067d774756ac9c5c8821ad303a
-
SHA512
434d3334a1c5706b05e47d90b560730eaef7a299b3d329c430a3fdb228768e748941bb9869123d40cddd18211b3a17e99d1e5bb81ff36cdb6f220e351d075902
-
SSDEEP
3072:KvYsrngwVVvegCVJSMFXqG2ru7QOPaNgo:zkVN4vDafiuT
Malware Config
Signatures
Files
-
114489dd5e0ccaa5898852a3bc4dfc2fe6894f067d774756ac9c5c8821ad303a.exe windows x86
36c6151937a3e5d6785f977744681f21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
GetPrivateProfileStringA
IsBadReadPtr
OpenProcess
GetVersionExA
GetLastError
VirtualProtectEx
GetSystemDefaultLCID
GetACP
QueryPerformanceCounter
GetLocaleInfoW
SetHandleCount
GetProcessHeap
msvcrt
_controlfp
__p___initenv
_XcptFilter
calloc
__p__commode
_adjust_fdiv
_except_handler3
__setusermatherr
free
_exit
atan2
__set_app_type
_initterm
__p__fmode
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ