Static task
static1
Behavioral task
behavioral1
Sample
10b7d6d8608c7d5e10c3cb28c9c77b61a8501c2a541b575a0d861ef3c014f9e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10b7d6d8608c7d5e10c3cb28c9c77b61a8501c2a541b575a0d861ef3c014f9e5.exe
Resource
win10v2004-20220812-en
General
-
Target
10b7d6d8608c7d5e10c3cb28c9c77b61a8501c2a541b575a0d861ef3c014f9e5
-
Size
76KB
-
MD5
491aa161095b07a1d69cfa5173544490
-
SHA1
a99729b2cd0577443b6b1dab39209d4d55df988c
-
SHA256
10b7d6d8608c7d5e10c3cb28c9c77b61a8501c2a541b575a0d861ef3c014f9e5
-
SHA512
ee2ddf1b2f2ef0814e07d21aa10a98692f52939700151d8768fab2e825d5e4f0d0260062b682a129c88362ba037780ca1eee4af1c8bdeca552f86b4e7fd47be7
-
SSDEEP
1536:Z40XusX19yfAjtPI6vXKZ+5vTo+ZOEUvxH5ClJ8+zX+QjteIl6PVk9vE1:Z4idt5PI6vaZ+JRKpHMJXKQj94Nkw
Malware Config
Signatures
Files
-
10b7d6d8608c7d5e10c3cb28c9c77b61a8501c2a541b575a0d861ef3c014f9e5.exe windows x86
690ed4f28911cdb30352387c8c08eae6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
bltlite24
Blt_Init
Blt_SafeInit
tcl84
Tcl_Init
Tcl_SetVar
Tcl_StaticPackage
Tcl_Alloc
Tcl_Main
msvcrt
__getmainargs
__p__commode
__setusermatherr
setlocale
_exit
_XcptFilter
exit
__p___initenv
__p__fmode
_initterm
_onexit
_adjust_fdiv
_controlfp
__set_app_type
_except_handler3
__dllonexit
kernel32
GetCommandLineA
GetModuleFileNameA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 804B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE