Static task
static1
Behavioral task
behavioral1
Sample
47afe5d36f20d9bc502d34ee24c2009a1ef6221d14d84ab0fc0508f21883782a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
47afe5d36f20d9bc502d34ee24c2009a1ef6221d14d84ab0fc0508f21883782a.exe
Resource
win10v2004-20220901-en
General
-
Target
47afe5d36f20d9bc502d34ee24c2009a1ef6221d14d84ab0fc0508f21883782a
-
Size
108KB
-
MD5
0b7c9a6a294524691fdda10ef6775bd6
-
SHA1
2f87e7bec82835994e3714018bdcb7aaa3ee7cff
-
SHA256
47afe5d36f20d9bc502d34ee24c2009a1ef6221d14d84ab0fc0508f21883782a
-
SHA512
c58dbe63650ed79ccab365ae7a241e174be2fa365c67305d0f755ecb91492a63bf784e96a2858e49073fa6abbbab6c9d1b2576c920acd4b1e76e4ee575120d30
-
SSDEEP
1536:V3NApFpd7q883nDy5B/gPc0kM6DP61QeIVX2fVp:CFCg4Pc0kjDUOVMVp
Malware Config
Signatures
Files
-
47afe5d36f20d9bc502d34ee24c2009a1ef6221d14d84ab0fc0508f21883782a.exe windows x86
0acbb6ed5834f098c6fba545ba2574fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GlobalReAlloc
LoadResource
lstrcmpiW
SetHandleCount
GlobalFree
IsDebuggerPresent
GetDateFormatA
GetUserDefaultLangID
GetCurrentThread
DeleteFileA
GetProcAddress
RtlMoveMemory
lstrcatA
GetVersionExW
VirtualFree
GetCurrentProcessId
GetCurrentDirectoryA
SizeofResource
LCMapStringA
LocalAlloc
GetThreadLocale
DeleteFileW
GetStartupInfoA
GetTempPathA
VirtualProtect
SetFileAttributesA
InterlockedExchange
GetStdHandle
SetFilePointer
InterlockedDecrement
SystemTimeToFileTime
GetModuleHandleA
msvcrt
__set_app_type
_adjust_fdiv
_initterm
_controlfp
_exit
__p__fmode
tan
__p___initenv
__p__commode
__getmainargs
_XcptFilter
_except_handler3
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Abaf Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ