Static task
static1
Behavioral task
behavioral1
Sample
de88bfc910a2c525f3e2ed2c56d18e4ad9474f73e6bc610832e0f6624bfd176f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
de88bfc910a2c525f3e2ed2c56d18e4ad9474f73e6bc610832e0f6624bfd176f.exe
Resource
win10v2004-20220901-en
General
-
Target
de88bfc910a2c525f3e2ed2c56d18e4ad9474f73e6bc610832e0f6624bfd176f
-
Size
77KB
-
MD5
0e59bedb47accffebf26755f54058267
-
SHA1
ed8faf0e8fdc4e24d909ab30b272cd333c8d7953
-
SHA256
de88bfc910a2c525f3e2ed2c56d18e4ad9474f73e6bc610832e0f6624bfd176f
-
SHA512
45355b8181384da8ef3145f3273c5e9ce5c12b9fab58e8900e963b4ada9a8bded435c9b751266729a53ee07167b263bc0632377eef2a899329024e1c1349dab2
-
SSDEEP
1536:JYXZwF2eLVAl1zhOVQucmOkkjQbPwyrXGEf6ePNONwGGnCSST:q+2eLVA/ho5PwyrGErwwuSk
Malware Config
Signatures
Files
-
de88bfc910a2c525f3e2ed2c56d18e4ad9474f73e6bc610832e0f6624bfd176f.exe windows x86
b33b68bda67dee8c4a1b9c8d6eef6359
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
FileTimeToLocalFileTime
ExitProcess
GetTempPathA
IsBadReadPtr
SizeofResource
FileTimeToDosDateTime
GetShortPathNameA
GetModuleHandleA
SetUnhandledExceptionFilter
GetCurrentThread
RtlMoveMemory
CreateFileMappingA
GetVersionExA
GetModuleFileNameW
GetThreadLocale
DeleteFileA
InterlockedIncrement
GetOEMCP
VirtualProtect
GetExitCodeProcess
GetDriveTypeA
GetSystemInfo
OutputDebugStringA
RemoveDirectoryA
LoadResource
GetProcAddress
msvcrt
__p__fmode
__set_app_type
_adjust_fdiv
__p___initenv
__getmainargs
_controlfp
_initterm
_exit
_except_handler3
_XcptFilter
__p__commode
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ