Static task
static1
Behavioral task
behavioral1
Sample
151ae8cb24b63124447236393783a7149a2ad8e6a29f9f30632f3583a09e1faf.exe
Resource
win7-20220901-en
General
-
Target
151ae8cb24b63124447236393783a7149a2ad8e6a29f9f30632f3583a09e1faf
-
Size
141KB
-
MD5
9239f5926d7e03cbe106c9411783fab9
-
SHA1
d268aba1e2c79fef8790a4e39d6cbaf9293e8aa3
-
SHA256
151ae8cb24b63124447236393783a7149a2ad8e6a29f9f30632f3583a09e1faf
-
SHA512
ae574cec33b529f270af63ba36db0312cd520c43095e28285d40ed1735c7389430e9ac632eb6f7e296b89396cced3423035e4f5da9b36a65286fefd13a4e48f5
-
SSDEEP
3072:TsjQ5SOAjoOTknMTrysqwf8y0gCB5C93NOFdtxUt3d349:4k5SOAN3yTwfj05CZNOFd+3
Malware Config
Signatures
Files
-
151ae8cb24b63124447236393783a7149a2ad8e6a29f9f30632f3583a09e1faf.exe windows x86
50693b1963d4ee8188b28bfdc3905257
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
imagehlp
UnDecorateSymbolName
kernel32
GetVersion
ExitProcess
GetCommandLineA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
FindNextFileA
FindFirstFileA
FindClose
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
GetLastError
FlushFileBuffers
SetFilePointer
CloseHandle
SetStdHandle
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzedmwh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE