Static task
static1
Behavioral task
behavioral1
Sample
428087641293486a1258f437b291d8d78b77d9d2153ce30385d31c6036fcf41e.exe
Resource
win7-20220901-en
General
-
Target
428087641293486a1258f437b291d8d78b77d9d2153ce30385d31c6036fcf41e
-
Size
647KB
-
MD5
91168b057e370d456ac3ef154f6c4c89
-
SHA1
314ae5f74f4a52ed90477527a4a8f78bc7b954ed
-
SHA256
428087641293486a1258f437b291d8d78b77d9d2153ce30385d31c6036fcf41e
-
SHA512
3d2cfec3dc567bf431e337489175320fc824d5579ff12a6b8e0c1f902f3f60656094991b5e6a351cef5a1fb489b83aaf4526df6dd7a7aecec682d590e6ca4ea1
-
SSDEEP
1536:W8QCGQWlngkYFKynXvAh1MFOMLwOueYdqXhVBZXcMik421dNSkWNVYM3O3:WhvQQgk6Kyn/wMFOMLN9AQdjWzT+
Malware Config
Signatures
Files
-
428087641293486a1258f437b291d8d78b77d9d2153ce30385d31c6036fcf41e.exe windows x86
9223292fab6aa3d7066cfb0d41ab893c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
SetErrorMode
FindResourceW
GetTickCount
GetVolumeInformationA
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetLastError
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentProcessId
lstrcpyA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ