Static task
static1
Behavioral task
behavioral1
Sample
f270ec5f075b1121802add664f9582c56b0039066ee59dbee35d45320360f0a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f270ec5f075b1121802add664f9582c56b0039066ee59dbee35d45320360f0a4.exe
Resource
win10v2004-20220812-en
General
-
Target
f270ec5f075b1121802add664f9582c56b0039066ee59dbee35d45320360f0a4
-
Size
128KB
-
MD5
72db30b516ac69b6aaef000214155610
-
SHA1
84539bed0e083b35ddb368775c33c45eb65e9258
-
SHA256
f270ec5f075b1121802add664f9582c56b0039066ee59dbee35d45320360f0a4
-
SHA512
3fa74cf2933d4b0362721ba29667aab4e07764ac1595e327bdc5e6d9cce02dcf0b34ee328ab59b03e61d8f18747c3e6195bb01df10e8060d0d0bd678b9e52695
-
SSDEEP
3072:xzOxncrgPiDLlU89Giw9WwLMK0hG3qaeeZpFJ+/qtg6mZ:2CpU8GihGPemW/ig
Malware Config
Signatures
Files
-
f270ec5f075b1121802add664f9582c56b0039066ee59dbee35d45320360f0a4.exe windows x86
a1d1cbacae79b293e8378cf9ae2706a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PrepareTape
LoadModule
FindFirstFileW
GetCompressedFileSizeW
ExpandEnvironmentStringsW
GetFileInformationByHandle
GetShortPathNameA
ConnectNamedPipe
GetNumberFormatW
QueueUserWorkItem
CreateDirectoryExA
QueueUserAPC
GetSystemDefaultUILanguage
GetTempFileNameA
GetQueuedCompletionStatus
GlobalUnWire
LocalShrink
FindFirstFileA
GetDiskFreeSpaceExA
SetCurrentDirectoryA
GetComputerNameExW
CreateEventW
GetDevicePowerState
GetLongPathNameW
CreateWaitableTimerW
GetSystemPowerStatus
RequestDeviceWakeup
lstrcatW
CompareStringA
SetProcessAffinityMask
CloseHandle
version
VerFindFileW
VerFindFileA
VerInstallFileA
user32
InvalidateRect
LookupIconIdFromDirectory
DdeQueryStringA
GetKeyboardLayoutNameW
SendIMEMessageExA
CharToOemW
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 375B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 381B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ