Static task
static1
Behavioral task
behavioral1
Sample
dea0219295a2daa1b1a5cdd7be2c9044cfa6733c7bbbf2b6f79d4c0172e97c85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dea0219295a2daa1b1a5cdd7be2c9044cfa6733c7bbbf2b6f79d4c0172e97c85.exe
Resource
win10v2004-20220812-en
General
-
Target
dea0219295a2daa1b1a5cdd7be2c9044cfa6733c7bbbf2b6f79d4c0172e97c85
-
Size
77KB
-
MD5
06bc41e17e04b8caabe43ce31a705aa6
-
SHA1
04f6fed9f97496a677c3c251831af34ed0e4fdb5
-
SHA256
dea0219295a2daa1b1a5cdd7be2c9044cfa6733c7bbbf2b6f79d4c0172e97c85
-
SHA512
0b6691f3a148834e67dbd52e01ac06dc079503c5a5464f57868e6ec6696296c546eb25cc1e23c68567aa12f1fe16c4cb69e6d1e7a6414dba02ec9542b260c18a
-
SSDEEP
1536:GoBMVEiDCHNb1zPaYygaRMFYIvMJ1ep9s8cIDhix0hMUu:GoBrJxTWOFJE198DD5Mn
Malware Config
Signatures
Files
-
dea0219295a2daa1b1a5cdd7be2c9044cfa6733c7bbbf2b6f79d4c0172e97c85.exe windows x86
24551e6f38384cb444ae0ff8c4131bc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
UnhandledExceptionFilter
GetDiskFreeSpaceA
GetWindowsDirectoryA
SetUnhandledExceptionFilter
RtlMoveMemory
RtlUnwind
RaiseException
SetFileAttributesW
WriteConsoleA
IsBadCodePtr
GetThreadLocale
GetTempPathA
MulDiv
lstrcpyA
GetCurrentThread
GetProcAddress
DeleteFileA
GetConsoleOutputCP
GetModuleHandleA
GetStdHandle
VirtualProtect
GetStartupInfoW
GetExitCodeProcess
SizeofResource
LoadResource
ExitProcess
msvcrt
_controlfp
__set_app_type
_except_handler3
__p___initenv
__p__fmode
_exit
__p__commode
_XcptFilter
_adjust_fdiv
__getmainargs
_initterm
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ