Static task
static1
Behavioral task
behavioral1
Sample
0d624d8346d50a35f06026aa366b63e13650c52e96157390a8c77fec81302d5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d624d8346d50a35f06026aa366b63e13650c52e96157390a8c77fec81302d5d.exe
Resource
win10v2004-20220901-en
General
-
Target
0d624d8346d50a35f06026aa366b63e13650c52e96157390a8c77fec81302d5d
-
Size
106KB
-
MD5
6a4863876d56e4050d9e0bef0c5cefaf
-
SHA1
018111736ae946e1e48c617d582f050590f9c9da
-
SHA256
0d624d8346d50a35f06026aa366b63e13650c52e96157390a8c77fec81302d5d
-
SHA512
092e98e8c1b7dd2a97fc6fc70b8366c62065d38943569eb4c235e9886c24e55efcc72000b014dc845e4b50dda16340b0d77e7960d815f2910f484dbe62f4e85d
-
SSDEEP
3072:Luo/oRQ4392uqKuIViKid+3gHJJoscD8qJsS13:9/g9Bq4diiYb3c/sE3
Malware Config
Signatures
Files
-
0d624d8346d50a35f06026aa366b63e13650c52e96157390a8c77fec81302d5d.exe windows x86
6782b02b46ef13e05b03f88d3ede7aa4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
GetModuleHandleA
GetProcAddress
GetACP
SizeofResource
FlushFileBuffers
GetUserDefaultLCID
lstrcatA
VirtualProtect
Sleep
FileTimeToSystemTime
SetEnvironmentVariableA
GetThreadLocale
RtlMoveMemory
GetStartupInfoW
GetCurrentThread
GetStringTypeW
FreeEnvironmentStringsW
GetConsoleOutputCP
CompareStringW
LoadResource
OutputDebugStringA
GetCommandLineW
WriteConsoleA
DeleteFileA
GetTempPathA
msvcrt
__p___initenv
_exit
tan
_adjust_fdiv
_initterm
_XcptFilter
_except_handler3
_controlfp
__set_app_type
__getmainargs
__p__commode
__p__fmode
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Yalygahy Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ