Static task
static1
Behavioral task
behavioral1
Sample
f247ef6b0697903016c1bd4a06d6165ea2a80974a0262fbc257d6e8e320165cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f247ef6b0697903016c1bd4a06d6165ea2a80974a0262fbc257d6e8e320165cf.exe
Resource
win10v2004-20220812-en
General
-
Target
f247ef6b0697903016c1bd4a06d6165ea2a80974a0262fbc257d6e8e320165cf
-
Size
768KB
-
MD5
4b6801b2e2dde2063179d8f24aff4bba
-
SHA1
8d48762dc0c8dfc6b3a3fd07389429026bfc3f47
-
SHA256
f247ef6b0697903016c1bd4a06d6165ea2a80974a0262fbc257d6e8e320165cf
-
SHA512
d0531619c8680dc33917a0db4a1bb228b1dd55c465b10eec7f0930d6a2289d4fbb033ab885f1411340ee199341edc726e9418775f934128f67128b1bc6f989e6
-
SSDEEP
12288:z96Z5ef3GZTrtOd2W8Sp4dPoXbOSQTAL9HRbi53Ifyd3Ad/:YZ5u2ZMd2W8SieLQT29Gq
Malware Config
Signatures
Files
-
f247ef6b0697903016c1bd4a06d6165ea2a80974a0262fbc257d6e8e320165cf.exe windows x86
55764d280d5641261e1a07a225ab36e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetLastError
GetLocaleInfoW
SetCurrentDirectoryA
DeleteCriticalSection
GetVersionExA
FileTimeToSystemTime
GetFileAttributesA
TlsFree
GetCurrentProcess
SetEndOfFile
FindFirstFileA
GetTickCount
WriteFile
GetSystemTimeAsFileTime
LoadLibraryA
SetEnvironmentVariableW
HeapFree
CreateThread
MultiByteToWideChar
GetFileType
HeapReAlloc
GetExitCodeThread
HeapAlloc
FindClose
GetFullPathNameA
TerminateProcess
ExitThread
SetEnvironmentVariableA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentDirectoryA
EnterCriticalSection
FindNextFileA
SetLastError
GetStartupInfoA
ExitProcess
LeaveCriticalSection
WideCharToMultiByte
GetCurrentProcessId
GetStdHandle
GetCurrentThreadId
SetHandleCount
FileTimeToLocalFileTime
GetLocaleInfoA
CloseHandle
ReadFile
msvcrt
time
printf
puts
gmtime
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 740KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ