Static task
static1
Behavioral task
behavioral1
Sample
10f44965e8594001589b17e343126a694f51b2ec6e34601cc1e76a91880d076e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10f44965e8594001589b17e343126a694f51b2ec6e34601cc1e76a91880d076e.exe
Resource
win10v2004-20220812-en
General
-
Target
10f44965e8594001589b17e343126a694f51b2ec6e34601cc1e76a91880d076e
-
Size
176KB
-
MD5
6cf153abcf1fa97f7e5ebc6a645354ec
-
SHA1
e8fcb1b87a71cd500a05472a17822a134f8df09e
-
SHA256
10f44965e8594001589b17e343126a694f51b2ec6e34601cc1e76a91880d076e
-
SHA512
d14b21b4dc1fd68a0ad1e3920db8dbe9ba29bb37099cbd6e77c1b0806c04155f4cbfd21351fc799d97a648b7d45de8f86f9351b22473c7d2e477d20d31babc4b
-
SSDEEP
3072:haC7leSLoVyHecDLdLOQhdP7nRJnb/Vrjhvsx6ixZ:haCZnaiHdLZdTnb/Vrj5otZ
Malware Config
Signatures
Files
-
10f44965e8594001589b17e343126a694f51b2ec6e34601cc1e76a91880d076e.exe windows x86
2ee542441b5a3c072a50d8eee610be05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
ExitProcess
AddAtomW
FlushFileBuffers
GetModuleHandleA
SetLastError
LoadLibraryExW
GetEnvironmentVariableW
CreateFileA
GetVersionExW
GetModuleHandleW
TlsFree
HeapFree
WriteConsoleW
UnmapViewOfFile
TlsAlloc
GetTempPathW
InterlockedIncrement
GetConsoleMode
EnumResourceNamesA
VerLanguageNameA
CreateFileMappingA
GetProcAddress
GetVersionExA
GetProcessHeap
CreateFileW
GetConsoleCP
MapViewOfFile
InterlockedDecrement
HeapAlloc
GetLastError
TlsSetValue
Sleep
winmm
mciSendCommandW
sndPlaySoundW
shlwapi
PathAddBackslashW
setupapi
CM_Get_Depth_Ex
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ