Static task
static1
Behavioral task
behavioral1
Sample
10e3af4f7893f3bafd9abf7d8b64703c4819ea27615329549536c8d0889b5731.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10e3af4f7893f3bafd9abf7d8b64703c4819ea27615329549536c8d0889b5731.exe
Resource
win10v2004-20220812-en
General
-
Target
10e3af4f7893f3bafd9abf7d8b64703c4819ea27615329549536c8d0889b5731
-
Size
225KB
-
MD5
817aebcee2d5fe3859ae948d9bd30440
-
SHA1
96f45856061865251bc25da46322bf795dbe624c
-
SHA256
10e3af4f7893f3bafd9abf7d8b64703c4819ea27615329549536c8d0889b5731
-
SHA512
36da405255d05e552de9005e81e866ad455f1278b0ffee70cdc46c07aa0936e5562eedadd4fc5455721fedab8c9fd51c56d4012557a9ec3a534bc7f9ac3b7817
-
SSDEEP
3072:yPxfJGXnSmEisBooTVqIdfLAvNWUhwvTTIAHFHkyVE4ABvTuYGNLXlj7wPp0tid/:BzE3FTpdk98NVE4ABGJljcPOtoHh
Malware Config
Signatures
Files
-
10e3af4f7893f3bafd9abf7d8b64703c4819ea27615329549536c8d0889b5731.exe windows x86
cae91a60412758b09f775c2cb6122f40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileA
GetCommandLineA
GetModuleHandleW
GetThreadLocale
VirtualAlloc
GetCurrentThread
GetProcAddress
GetStringTypeA
lstrlenA
GetCommandLineW
GetACP
GetVersion
GetOEMCP
GetCPInfo
ExitProcess
LoadLibraryExA
ExitThread
GetModuleHandleA
GetDiskFreeSpaceA
msvcrt
memcmp
wcsncmp
rand
shell32
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetFolderPathA
DragQueryFileA
Shell_NotifyIconA
version
VerFindFileA
oleaut32
SysAllocStringLen
SafeArrayGetElement
gdi32
SetBkColor
RestoreDC
CopyEnhMetaFileA
CreatePalette
SetBkMode
SelectObject
GetClipBox
LineTo
CreateFontIndirectA
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ