Static task
static1
Behavioral task
behavioral1
Sample
f1479760e20bba45bf5446f2ec068ca2f4c0a986424942ef4066055c6b97b158.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1479760e20bba45bf5446f2ec068ca2f4c0a986424942ef4066055c6b97b158.exe
Resource
win10v2004-20220812-en
General
-
Target
f1479760e20bba45bf5446f2ec068ca2f4c0a986424942ef4066055c6b97b158
-
Size
404KB
-
MD5
8f847b3461f116ea37007356f0bfcfc8
-
SHA1
d992113a7e11042461e3715b33d303398270a66b
-
SHA256
f1479760e20bba45bf5446f2ec068ca2f4c0a986424942ef4066055c6b97b158
-
SHA512
e5ebb10d86ba8419c6f8e30b5329c79192314884bdca9bc93f0cd3d88d0ed2de0c3e99ded773f77b689fbdf53f31bc80ab5d211c86193ad08b97f1e892250658
-
SSDEEP
12288:Y8jrzDVXFPlZ9yNwPqyyb3C5gww+wYXIUF3sWxT64G:JPzBXF2Hb3waFYXI03Q
Malware Config
Signatures
Files
-
f1479760e20bba45bf5446f2ec068ca2f4c0a986424942ef4066055c6b97b158.exe windows x86
aca4d51d09d1f49c003b46ffdb33a125
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
setvbuf
wcscspn
iswdigit
_spawnv
sinh
fopen
kernel32
CreateFileMappingW
SetProcessPriorityBoost
RemoveDirectoryA
FoldStringW
FindClose
GetCommandLineA
GetBinaryTypeA
VirtualProtect
LCMapStringW
ReadDirectoryChangesW
SetCommTimeouts
WriteConsoleOutputW
DefineDosDeviceA
CreateTimerQueue
ExitThread
user32
SetProcessDefaultLayout
LoadCursorFromFileA
GetForegroundWindow
LoadBitmapW
UserLpkTabbedTextOut
ToUnicode
WCSToMBEx
BroadcastSystemMessage
Sections
.text Size: 395KB - Virtual size: 671KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ