Static task
static1
Behavioral task
behavioral1
Sample
896c2d96a9537556fc0ec82dd8d0b27cdec14cc53ef444d32182eda0c949c9e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
896c2d96a9537556fc0ec82dd8d0b27cdec14cc53ef444d32182eda0c949c9e8.exe
Resource
win10v2004-20220812-en
General
-
Target
896c2d96a9537556fc0ec82dd8d0b27cdec14cc53ef444d32182eda0c949c9e8
-
Size
187KB
-
MD5
05d3bfd6cc8f92d97913ca77ebf72461
-
SHA1
40389ebb6e09acd9471d9cada8eab7cd71e057b0
-
SHA256
896c2d96a9537556fc0ec82dd8d0b27cdec14cc53ef444d32182eda0c949c9e8
-
SHA512
bf76dcca3707d3d1e2fb79eaf189d9a28fed33049809627c46c4c7fea42ce11bac0614ba0859bbc0fee40887dbd5fe3243a7824805d6bdc047167b660f157448
-
SSDEEP
3072:wY1oT9/5nkl/lRf7d1hpWLcpHVb9PAJY0nKxsAIwJ9jb874PAJY0nKxsAIwJ9jb9:wCe9hk9Lzd1hpW2NoYPx5Iw7jIXYPx5R
Malware Config
Signatures
Files
-
896c2d96a9537556fc0ec82dd8d0b27cdec14cc53ef444d32182eda0c949c9e8.exe windows x86
d140148517e9122857900ce8cdd14d16
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetCurrentProcessId
FoldStringW
SetDefaultCommConfigW
ExpandEnvironmentStringsW
GetModuleHandleA
LoadLibraryExW
GetLocaleInfoW
GetTapePosition
WinExec
GetTimeZoneInformation
msvcrt
__getmainargs
_utime
__p__commode
getc
_rotl
_initterm
__set_app_type
_heapadd
_ismbbalnum
_mbcasemap
exit
_except_handler3
__p__fmode
_umask
_XcptFilter
_adjust_fdiv
_controlfp
_execlp
_wfindnext64
__setusermatherr
_acmdln
_mbsupr
_exit
user32
UnpackDDElParam
SetSysColors
DrawIcon
CharToOemBuffW
MenuItemFromPoint
IsCharAlphaNumericW
gdi32
GetEnhMetaFileW
DeleteDC
GetTextExtentPointA
UpdateICMRegKeyW
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ