Static task
static1
Behavioral task
behavioral1
Sample
c948db48aaf40a5673f332feb8739e14a172ed8217f0b3dea72529b1c08bf04a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c948db48aaf40a5673f332feb8739e14a172ed8217f0b3dea72529b1c08bf04a.exe
Resource
win10v2004-20220812-en
General
-
Target
c948db48aaf40a5673f332feb8739e14a172ed8217f0b3dea72529b1c08bf04a
-
Size
99KB
-
MD5
4da1c05016c255e5b0547718d2da64d0
-
SHA1
615c30f98a46c3dcdbd4d7c3e5e6f7a248c9fecd
-
SHA256
c948db48aaf40a5673f332feb8739e14a172ed8217f0b3dea72529b1c08bf04a
-
SHA512
dc8699b1c6156b45f104f16cc6277e387eda3a54a7d0efc18e9eec521387537ec925b12df9cdbf4990b5c10de7266e36664405026ef3c20ad90983d397fc13cf
-
SSDEEP
3072:gTNnrS1+B1wore8EjfCw6kHDUTaUjN8h4AWW:8NrS1se88fj6kHDUTZjN
Malware Config
Signatures
Files
-
c948db48aaf40a5673f332feb8739e14a172ed8217f0b3dea72529b1c08bf04a.exe windows x86
cfa927e4ddd32b960b276cab1c4fcc88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler
GetConsoleMode
GetConsoleOutputCP
WriteFile
GetLastError
MultiByteToWideChar
ReadFile
GetConsoleCP
VirtualAlloc
VirtualQuery
CloseHandle
SetFilePointer
SetStdHandle
WideCharToMultiByte
DeleteFileA
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE