Static task
static1
Behavioral task
behavioral1
Sample
042bb502a15568d34d59db935ac28cf41a29c6ea43eefeb648a3f714ca395301.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
042bb502a15568d34d59db935ac28cf41a29c6ea43eefeb648a3f714ca395301.exe
Resource
win10v2004-20220901-en
General
-
Target
042bb502a15568d34d59db935ac28cf41a29c6ea43eefeb648a3f714ca395301
-
Size
91KB
-
MD5
9285f25becbbd754d196a5ce5b0b1a57
-
SHA1
b6b6f498d4c370ae153147ae0f0a0d46c9d093a5
-
SHA256
042bb502a15568d34d59db935ac28cf41a29c6ea43eefeb648a3f714ca395301
-
SHA512
2a3f1ac6ee4ed56e37cd42b1ef05ce37494d98195c239ce5272dec1a508a05aceaab8ba44c88b1cca3ce66d208426c9c5011de9a1f6b244f8a70bd0c0db03cb2
-
SSDEEP
1536:VMwKR5NT6wrOQWpS8PXIPv3xsZ1Skai0jVxaFhn:VhKJTlWU8PefxCSkazxaHn
Malware Config
Signatures
Files
-
042bb502a15568d34d59db935ac28cf41a29c6ea43eefeb648a3f714ca395301.exe windows x86
73eef72a2b1987805a4450689b12dac1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
__getmainargs
__p__fmode
_exit
__set_app_type
_except_handler3
_initterm
__p__commode
_XcptFilter
__p___initenv
_controlfp
kernel32
GetModuleHandleA
GetSystemTimeAsFileTime
GetModuleFileNameW
GetStringTypeA
SetStdHandle
GetShortPathNameA
lstrcmpiW
OpenProcess
MoveFileA
GetSystemInfo
GetConsoleOutputCP
FileTimeToDosDateTime
lstrcmpA
GetExitCodeProcess
GetFileType
GetModuleHandleW
GetFileAttributesA
TerminateProcess
Sleep
GetThreadLocale
GetPrivateProfileStringA
ExitProcess
GetStartupInfoW
DeleteFileW
WaitForMultipleObjects
GetSystemTime
DuplicateHandle
LoadLibraryW
GetConsoleMode
GetCurrentProcessId
CompareStringW
GetTempPathW
DeleteFileA
VirtualProtect
GlobalAlloc
GetCommandLineW
GetTempPathA
GetEnvironmentStringsW
LoadResource
GetUserDefaultLangID
FreeEnvironmentStringsA
lstrlenA
GetVersion
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ