Static task
static1
Behavioral task
behavioral1
Sample
de199c356b8df8c37e26738de6489b030a58060ed91e48b7d99da0e0f6bbdde8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de199c356b8df8c37e26738de6489b030a58060ed91e48b7d99da0e0f6bbdde8.exe
Resource
win10v2004-20220901-en
General
-
Target
de199c356b8df8c37e26738de6489b030a58060ed91e48b7d99da0e0f6bbdde8
-
Size
417KB
-
MD5
4243d603bf3b2a24dc19321cdc85eae0
-
SHA1
e3beaa9370e3342cc7a4a41eca3a5e8c09ec0247
-
SHA256
de199c356b8df8c37e26738de6489b030a58060ed91e48b7d99da0e0f6bbdde8
-
SHA512
3518f345deadcb47185a529ecd481ced5bd190950292ad955b1cd8035ed1698fefaf2ee385bf64a8460fcffa5de75493268e76bfdd3fc008ef8e6fbd931e3679
-
SSDEEP
12288:+JPeLT8H2M4Hw98thW/lkjA0w5+JwV69h:/T8WFQ98Pw+JNh
Malware Config
Signatures
Files
-
de199c356b8df8c37e26738de6489b030a58060ed91e48b7d99da0e0f6bbdde8.exe windows x86
61627a8ff3e2b7aa63254e8b6c22d08c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
PrepareTape
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 493KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ