Static task
static1
Behavioral task
behavioral1
Sample
853df145eee885ccd865d72e89dfc8bf42170c981b04c1a3f15fb9a3c2261061.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
853df145eee885ccd865d72e89dfc8bf42170c981b04c1a3f15fb9a3c2261061.exe
Resource
win10v2004-20220812-en
General
-
Target
853df145eee885ccd865d72e89dfc8bf42170c981b04c1a3f15fb9a3c2261061
-
Size
201KB
-
MD5
6c9f9957fa2aa82e4ea5cec5cd130e6d
-
SHA1
035487a60ab26337437127870db6cc617d67a09b
-
SHA256
853df145eee885ccd865d72e89dfc8bf42170c981b04c1a3f15fb9a3c2261061
-
SHA512
f47c87e1bfd78303188aaf2b10e0519f9f28a93248c7c84606858efef98c574aa740508094f0ac159cc7597cabd5b56ee76c1503e7fc1e53ac2e43f56b77e517
-
SSDEEP
3072:IlFaLYgLujvByhxCOFA70AcVL84PdqadN+YyHiYx802rimT4yV:I+LYgOvHOFA75cVnPZN+YgiOyi+
Malware Config
Signatures
Files
-
853df145eee885ccd865d72e89dfc8bf42170c981b04c1a3f15fb9a3c2261061.exe windows x86
f23eee1a957905311b4481119dc2a4ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
SetCurrentDirectoryA
lstrlenA
GetCurrentThread
GetCurrentThreadId
GlobalFindAtomW
GetProcessHeap
LoadLibraryW
lstrcmpA
Sleep
GetCurrentProcess
lstrlenW
SetLastError
GetConsoleOutputCP
IsDebuggerPresent
GetVersion
QueryPerformanceCounter
DeleteFileW
GetModuleHandleA
GetCommandLineW
DeleteFileA
MulDiv
GetStartupInfoA
GetCurrentProcessId
GetACP
GetLastError
GetCommandLineA
CopyFileA
lstrcmpiA
GlobalFindAtomA
GetOEMCP
GetWindowsDirectoryA
GetThreadLocale
GetModuleHandleW
RemoveDirectoryA
GetDriveTypeA
VirtualAlloc
user32
CharNextA
GetDesktopWindow
GetDC
GetSystemMetrics
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE