Static task
static1
Behavioral task
behavioral1
Sample
f43fff6453e82836c03befddee9a082f10ca5e9932cba7786b90a27321295407.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f43fff6453e82836c03befddee9a082f10ca5e9932cba7786b90a27321295407.exe
Resource
win10v2004-20220812-en
General
-
Target
f43fff6453e82836c03befddee9a082f10ca5e9932cba7786b90a27321295407
-
Size
124KB
-
MD5
842b10100c32f7c5594c3479cf0f3c30
-
SHA1
1a5b364f95a65635605dab36d9c031bc9c2373aa
-
SHA256
f43fff6453e82836c03befddee9a082f10ca5e9932cba7786b90a27321295407
-
SHA512
294e9e2221a45451156ff82366e176b83358b7de396572a151f833aab28aba4f065e4871d27ec9f380748ff01b5ca3f432bc5a1221e4ec7d68b1b22052f5267c
-
SSDEEP
3072:lUpCQwpvtJam9wXXpbZxHD8XOVbu9OLeB51Kk:lUpq3hKbDHn69O6H1r
Malware Config
Signatures
Files
-
f43fff6453e82836c03befddee9a082f10ca5e9932cba7786b90a27321295407.exe windows x86
0028ca30d195874499307a4eb0c057da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
avcodec-54
av_dup_packet
av_free_packet
avcodec_close
avcodec_find_decoder
avcodec_open2
avformat-54
av_dump_format
av_guess_format
av_interleaved_write_frame
av_read_frame
av_register_all
av_write_trailer
avformat_alloc_context
avformat_find_stream_info
avformat_get_class
avformat_network_init
avformat_new_stream
avformat_open_input
avformat_write_header
avio_close
avio_flush
avio_open
avutil-52
av_dict_free
av_dict_set
av_free
av_freep
av_log_set_level
av_opt_find
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
SetErrorMode
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
_getpid
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
_acmdln
_amsg_exit
_cexit
_errno
_exit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
_vsnprintf
_wfopen
_winmajor
abort
atoi
calloc
exit
fclose
fopen
fprintf
free
fwrite
localeconv
malloc
memcpy
raise
remove
signal
sprintf
strlen
strncmp
strtol
vfprintf
user32
MessageBoxA
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE