Static task
static1
Behavioral task
behavioral1
Sample
42e509568111ca138f58e728d03aaeb1ee2d9246c56c2674aceedf2d25448a07.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
42e509568111ca138f58e728d03aaeb1ee2d9246c56c2674aceedf2d25448a07.exe
Resource
win10v2004-20220812-en
General
-
Target
42e509568111ca138f58e728d03aaeb1ee2d9246c56c2674aceedf2d25448a07
-
Size
136KB
-
MD5
019b9f389b4fa1fe30aa1c8ca33de400
-
SHA1
b13cb69f372dc899e3b233dff90949849c70f9d0
-
SHA256
42e509568111ca138f58e728d03aaeb1ee2d9246c56c2674aceedf2d25448a07
-
SHA512
3cb80b4eea4fae3a47db042fa84c8b2843bf53784adc9f2139eb7167b4a8223856d8f79096563cc422ac13d03862334ca18c81204865ea3216ff420e6b2d81b6
-
SSDEEP
3072:+YAf5zKL4yg6n6k+FqLo9e+9lqOLVrhqR:Rm5zo4yg6n6jgsldLVVc
Malware Config
Signatures
Files
-
42e509568111ca138f58e728d03aaeb1ee2d9246c56c2674aceedf2d25448a07.exe windows x86
88808e21bd511c859f9429f9c7df9361
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW
user32
GetCursorInfo
crtdll
__GetMainArgs
exit
raise
signal
ulib
?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z
??0DSTRING@@QAE@XZ
??0PATH@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??1PROGRAM@@UAE@XZ
??1PATH_ARGUMENT@@UAE@XZ
ntdll
RtlFreeHeap
RtlAllocateHeap
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 349B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE