Static task
static1
Behavioral task
behavioral1
Sample
01df67ead59058f8d0ecc976aa52b8815edf76af354b6b0f04c9e9331505d23d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01df67ead59058f8d0ecc976aa52b8815edf76af354b6b0f04c9e9331505d23d.exe
Resource
win10v2004-20220812-en
General
-
Target
01df67ead59058f8d0ecc976aa52b8815edf76af354b6b0f04c9e9331505d23d
-
Size
227KB
-
MD5
a303b8d2b85641e7f6ca4db821757f90
-
SHA1
5c841954beec8dabb60a33ab95ba5791de446bb7
-
SHA256
01df67ead59058f8d0ecc976aa52b8815edf76af354b6b0f04c9e9331505d23d
-
SHA512
aa077e905652ac05004f2a72da747f2e3a33b1965c5dbdb0ef0fd603167d793455998415368491447ba278db240d1f35d477b2ad2d7881511a725d6c250c15eb
-
SSDEEP
768:P+/Y4w7IBQGawQ8M0A75VVeemwbKnoXPYRk0qhLEV1ZFOPrAp9Bx76mN9dUmQZdg:qY4wcZF00A9edwbGie4KJ4PrArBT6PO
Malware Config
Signatures
Files
-
01df67ead59058f8d0ecc976aa52b8815edf76af354b6b0f04c9e9331505d23d.exe windows x86
c426f91d88177832fa1f8471c975c030
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
lstrcmpiW
LocalFree
InterlockedIncrement
HeapDestroy
GetCommandLineA
GetLastError
HeapFree
FreeLibrary
lstrlenW
lstrlenW
SetEvent
EnterCriticalSection
GetCommandLineW
GetStartupInfoA
GetModuleHandleA
GetLastError
ExitProcess
HeapFree
MultiByteToWideChar
ExitProcess
FreeLibrary
CreateFileW
VirtualFree
SetEvent
GetCurrentThreadId
lstrlenW
FormatMessageW
UnhandledExceptionFilter
InterlockedIncrement
LocalAlloc
GetProcAddress
LocalFree
GetTickCount
HeapDestroy
ReadFile
LocalAlloc
GetTickCount
GetModuleHandleW
GetStartupInfoA
GetTickCount
MultiByteToWideChar
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 32KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE