Static task
static1
Behavioral task
behavioral1
Sample
399c4f8d081cd8700589985ac81412335f7ddd942ed93892b85cdef87e0005e0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
399c4f8d081cd8700589985ac81412335f7ddd942ed93892b85cdef87e0005e0.exe
Resource
win10v2004-20220812-en
General
-
Target
399c4f8d081cd8700589985ac81412335f7ddd942ed93892b85cdef87e0005e0
-
Size
108KB
-
MD5
3b0688f52b4d9282bc8624f9806262a2
-
SHA1
817275b2b185b15660137867bacc0f05af9137c3
-
SHA256
399c4f8d081cd8700589985ac81412335f7ddd942ed93892b85cdef87e0005e0
-
SHA512
db284bf3276a6441d1756fc3b7c24d02069fad5527accc7efac7a467a175798c700421e746bb39c2b22afcce5223986832cd9eb6de7c36708caaf563653682b8
-
SSDEEP
1536:MgTJF5g5u+66liQ5vGkRGvAxtmCk6xkN1p+HyuZfNbuvLqxoHAi/:li59BGHem36iYHJPi
Malware Config
Signatures
Files
-
399c4f8d081cd8700589985ac81412335f7ddd942ed93892b85cdef87e0005e0.exe windows x86
aa6b0401d797edf8d9fa4450fe966f73
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
FlushFileBuffers
RtlMoveMemory
CreateFileMappingA
GetCurrentThread
GetFileAttributesA
DeleteFileA
UnhandledExceptionFilter
SizeofResource
GlobalUnlock
LoadResource
WaitForSingleObject
GetModuleHandleA
WideCharToMultiByte
GetThreadLocale
VirtualProtect
GetLocaleInfoW
GetEnvironmentVariableA
GetACP
CreateProcessA
GetProcAddress
FileTimeToSystemTime
GetFullPathNameA
GetDriveTypeA
SetFileAttributesA
GetFileType
GetTempPathA
msvcrt
_adjust_fdiv
_except_handler3
_exit
__set_app_type
__p__fmode
__p__commode
_controlfp
_initterm
__p___initenv
_XcptFilter
tan
__getmainargs
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Lyepo Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ