Static task
static1
Behavioral task
behavioral1
Sample
d41e83e20b37abae3fb3fb6a251037e1e92682092999fff0b22a42c5b5f35964.exe
Resource
win7-20220812-en
General
-
Target
d41e83e20b37abae3fb3fb6a251037e1e92682092999fff0b22a42c5b5f35964
-
Size
116KB
-
MD5
0d394beaa39484eadb6fa42510157850
-
SHA1
a08d8177edd8baa411e530004e5456dac2076156
-
SHA256
d41e83e20b37abae3fb3fb6a251037e1e92682092999fff0b22a42c5b5f35964
-
SHA512
fd7b8552ba8fca82b1d16c6db8d36ef231879202f57ee046986d760ab96fb397724dfc2fb9f03de7825d20b008384bd752c3a28e16a68413591e8b2b3975d665
-
SSDEEP
3072:y6RXKND4Qcto05j2KQxvxAJAKKc4sPWk:y6ZoDS3QxvxAJA7S
Malware Config
Signatures
Files
-
d41e83e20b37abae3fb3fb6a251037e1e92682092999fff0b22a42c5b5f35964.exe windows x86
da7cae494aefc3e4ba6e7a412587536a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
MoveFileA
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
FlushFileBuffers
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
WideCharToMultiByte
HeapFree
CloseHandle
SetFilePointer
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetLastError
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
SetStdHandle
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
CreateFileA
ReadFile
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEndOfFile
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE