Static task
static1
Behavioral task
behavioral1
Sample
403b8a3e66b46b2bbdaacee3ef125a99ff230396775460232f0d11108d74479f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
403b8a3e66b46b2bbdaacee3ef125a99ff230396775460232f0d11108d74479f.exe
Resource
win10v2004-20220812-en
General
-
Target
403b8a3e66b46b2bbdaacee3ef125a99ff230396775460232f0d11108d74479f
-
Size
104KB
-
MD5
0ab42c0cd957e3c773336c1cf1cc366a
-
SHA1
b2b09a421dc8c33a21a153ea9b3b48db1da95e63
-
SHA256
403b8a3e66b46b2bbdaacee3ef125a99ff230396775460232f0d11108d74479f
-
SHA512
4530a40c3bdcf8b7c08a6373563583ac94544c00a94a4dd74d1510062e157441fceb595cfbf9faf701e01c1e84d262f6fe388222c71a33ff9d865ace4b15d8e9
-
SSDEEP
3072:9XK4eVNM6RtlXG58/YSWYGWhndzEff1bv43oW:Tia6RnqhkldYX1s3oW
Malware Config
Signatures
Files
-
403b8a3e66b46b2bbdaacee3ef125a99ff230396775460232f0d11108d74479f.exe windows x86
95a1a3a18549f05434d6c2f1c569f4d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
GetVersionExW
DeleteFileA
GetExitCodeProcess
ExitProcess
GetTempPathA
GetCurrentProcessId
InterlockedDecrement
GetSystemTime
GetCommandLineA
GetThreadLocale
Sleep
GetUserDefaultLangID
GetStringTypeW
WaitForMultipleObjects
GetDateFormatA
LoadLibraryW
GetModuleFileNameW
GetLocaleInfoW
CompareFileTime
CopyFileW
lstrcmpiA
GetTempPathW
FileTimeToDosDateTime
IsBadWritePtr
LoadResource
GetVersion
VirtualProtect
MultiByteToWideChar
GetConsoleMode
GetShortPathNameA
GetTickCount
DeviceIoControl
GetModuleHandleA
CreateFileMappingA
GetPrivateProfileStringA
SetCurrentDirectoryA
CopyFileA
GetFileType
msvcrt
_adjust_fdiv
_exit
_XcptFilter
_controlfp
__set_app_type
_initterm
_except_handler3
__getmainargs
__p__fmode
__p__commode
__p___initenv
Sections
.text Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ