Static task
static1
Behavioral task
behavioral1
Sample
de92bd6b0757e3397722941c28da6d32e3f889b5d3f6c2a42d1734b23d931abd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de92bd6b0757e3397722941c28da6d32e3f889b5d3f6c2a42d1734b23d931abd.exe
Resource
win10v2004-20220812-en
General
-
Target
de92bd6b0757e3397722941c28da6d32e3f889b5d3f6c2a42d1734b23d931abd
-
Size
228KB
-
MD5
0d1bd34ec7c77b157cc739e03ce3e038
-
SHA1
727dd4f879768a8cb9127cd9d8ef261c3a4f840f
-
SHA256
de92bd6b0757e3397722941c28da6d32e3f889b5d3f6c2a42d1734b23d931abd
-
SHA512
8adf88fc45cec9b87140a6ec1e10eeeb0871a44a21478175424235b62958e1a4c8f19e551ec74c79740caf92e75619a2035c7c2023ca0a7e919d56bb178cac60
-
SSDEEP
1536:0H5v9ygzsF21ijdtkdmBLBUG1bqMM5BbbQnw84MAcN+/6P3DL:0HLzsw1u+GungwrX4+SPzL
Malware Config
Signatures
Files
-
de92bd6b0757e3397722941c28da6d32e3f889b5d3f6c2a42d1734b23d931abd.exe windows x86
3916d98315a358217afd8d0ea765bd7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQuery
GetSystemInfo
CreateProcessW
GlobalFree
GetModuleHandleW
VirtualProtect
IsBadWritePtr
GetStartupInfoW
GetThreadLocale
InterlockedIncrement
IsValidCodePage
GetLocaleInfoA
GetProcAddress
CreateProcessA
WritePrivateProfileStringA
msvcrt
__p__commode
__set_app_type
_controlfp
_exit
__getmainargs
atan2
__p___initenv
_adjust_fdiv
_initterm
__p__fmode
_XcptFilter
calloc
free
_except_handler3
Sections
.text Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE