Static task
static1
Behavioral task
behavioral1
Sample
201041a526649b1926509e087356db96019e32017039a6ed83013ce4f9c5b0aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
201041a526649b1926509e087356db96019e32017039a6ed83013ce4f9c5b0aa.exe
Resource
win10v2004-20220812-en
General
-
Target
201041a526649b1926509e087356db96019e32017039a6ed83013ce4f9c5b0aa
-
Size
274KB
-
MD5
8103a20545639430e8fdd92d3f988d70
-
SHA1
bd8f3139588c084a3e58065da60da1bf8bed828b
-
SHA256
201041a526649b1926509e087356db96019e32017039a6ed83013ce4f9c5b0aa
-
SHA512
29d07299049871812c4a18a3a989a8a5868ff57992af61eebc211db65e6146f97e47e218c99123ffb0f8227769ce27e3c9bdd96d28f1d9afe54cbd525475cb8a
-
SSDEEP
6144:kwIEEF4wcPrngoXR9qbVFylU68+jZNiPVk04N6dWqbn2c7HSTH4:BjNYW6cTH4
Malware Config
Signatures
Files
-
201041a526649b1926509e087356db96019e32017039a6ed83013ce4f9c5b0aa.exe windows x86
6eb5ef025247ab5bcf8d94ba23b2d692
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
crtdll
_assert
_close
_fstat
_ftol
_iob
_lseek
_open
_read
_write
exit
fprintf
free
_commode_dll
_fmode_dll
_XcptFilter
__GetMainArgs
_except_handler2
_exit
_initterm
malloc
__mb_cur_max_dll
_errno
_isctype
_pctype_dll
_setmode
fclose
fflush
fopen
fputc
getc
putc
realloc
sscanf
strerror
strrchr
tolower
vfprintf
Sections
.text Size: 56KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 152KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.fbss Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE