Static task
static1
Behavioral task
behavioral1
Sample
c0db385886c1bd14bfaa87ae198ed2942a270f9f716a473a6e52acbcae794edf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0db385886c1bd14bfaa87ae198ed2942a270f9f716a473a6e52acbcae794edf.exe
Resource
win10v2004-20220812-en
General
-
Target
c0db385886c1bd14bfaa87ae198ed2942a270f9f716a473a6e52acbcae794edf
-
Size
160KB
-
MD5
96f3913fe65719fc8230ccb852637ba0
-
SHA1
fe71ee263a6e740bf863fc1d56d40d63263786bf
-
SHA256
c0db385886c1bd14bfaa87ae198ed2942a270f9f716a473a6e52acbcae794edf
-
SHA512
44151b3ba67b2a13f6abe6a48b033a5c2dd90a22fcbba15e47343c4d1e54941034d4151e73602bae75c1219353ddf8f6efc1065c4eb5fac8f18ff2678a12dc76
-
SSDEEP
1536:iCZ6W1FAQiIKcmoAGFTn7oLwCUYldB5s7qEisPGcYNTuykWgy:iCf1qumVmTn0cPodAjGcYxuyBgy
Malware Config
Signatures
Files
-
c0db385886c1bd14bfaa87ae198ed2942a270f9f716a473a6e52acbcae794edf.exe windows x86
9e9f213b491cf655c9a217984027b552
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ReadFile
GlobalAlloc
GetAtomNameW
GetFileSizeEx
CreateFileW
GetModuleFileNameW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
user32
CreateWindowExW
ShowWindow
RegisterClassExW
msvcr80
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_cexit
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
_crt_debugger_hook
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
malloc
free
??3@YAXPAX@Z
_adjust_fdiv
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ