Static task
static1
Behavioral task
behavioral1
Sample
881de1e2eb8149d6f9d4bcfaf7eb98e7be182ccf731ee5472f9d7067094e40c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
881de1e2eb8149d6f9d4bcfaf7eb98e7be182ccf731ee5472f9d7067094e40c8.exe
Resource
win10v2004-20220812-en
General
-
Target
881de1e2eb8149d6f9d4bcfaf7eb98e7be182ccf731ee5472f9d7067094e40c8
-
Size
635KB
-
MD5
39582bd216cb29c7118db87b6dbd08d0
-
SHA1
1b433077b7c7182a81d86df94704c16d17d672e5
-
SHA256
881de1e2eb8149d6f9d4bcfaf7eb98e7be182ccf731ee5472f9d7067094e40c8
-
SHA512
85d7cf72878a26a73a628d01b61899ecb7c501d63bbfa154b9eab7377903a1e70dbca8aa92c931652b5dfc12d0bcbed3870deddb776e9465446e445024fa27a3
-
SSDEEP
12288:PeemPhDn9hLlRZyPW+CtIqD1RuDsBVI/CtejFjswQFZH/zj9uRbEK/Dlrx4lJHMO:JmPhv0CjuDmI/OeRdQFZfzSbFb4lJHMO
Malware Config
Signatures
Files
-
881de1e2eb8149d6f9d4bcfaf7eb98e7be182ccf731ee5472f9d7067094e40c8.exe windows x86
00d4520adb1300a2b94ed5c4ecb192c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBkMode
SelectObject
kernel32
InterlockedDecrement
GetEnvironmentStrings
GetConsoleOutputCP
GetCurrentProcessId
InterlockedExchange
SizeofResource
TlsSetValue
VirtualProtect
UnhandledExceptionFilter
GetCommandLineA
GetProcessHeap
GetModuleFileNameW
SleepEx
GetVolumeInformationW
ExitProcess
LCMapStringW
LoadResource
GetCurrentProcess
DeleteCriticalSection
ole32
CoTaskMemRealloc
ReleaseStgMedium
user32
MoveWindow
DestroyIcon
InvalidateRect
ScreenToClient
GetMessageA
msvcrt
memcpy
__wgetmainargs
advapi32
RegEnumKeyExA
RegSetValueExA
Sections
.text Size: 617KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ