Static task
static1
Behavioral task
behavioral1
Sample
6479c52a099695ca10862bb2cb9ac087c381fec4a1a37460ddac35e431ceb867.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6479c52a099695ca10862bb2cb9ac087c381fec4a1a37460ddac35e431ceb867.exe
Resource
win10v2004-20220901-en
General
-
Target
6479c52a099695ca10862bb2cb9ac087c381fec4a1a37460ddac35e431ceb867
-
Size
164KB
-
MD5
42909a365777d7ff9520f8f7baed52e1
-
SHA1
6e926501c1ba4617a7e2457c192940c2146bfc0e
-
SHA256
6479c52a099695ca10862bb2cb9ac087c381fec4a1a37460ddac35e431ceb867
-
SHA512
cdf1bbbafd127205fcec6313a595dea97b6b632f392db383efc2bca170deb89dfd98d82f546f3871d0cbf256aa9ac4738568461d317286375895c46f62fa91c8
-
SSDEEP
3072:zL1XmHqqIF+oRQxwz+5LuGCpbn8K0WQ/HN/7+khpzJiHMmiUPJ:lXmXIOxVMGFnr/tSkhpEsmiQ
Malware Config
Signatures
Files
-
6479c52a099695ca10862bb2cb9ac087c381fec4a1a37460ddac35e431ceb867.exe windows x86
27804638702373966510cb43f777bb0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fubar Size: 116KB - Virtual size: 136KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE