Static task
static1
Behavioral task
behavioral1
Sample
6032c74c728791fbc629758c070867dc2379090464f6077779221398758ff17d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6032c74c728791fbc629758c070867dc2379090464f6077779221398758ff17d.exe
Resource
win10v2004-20220812-en
General
-
Target
6032c74c728791fbc629758c070867dc2379090464f6077779221398758ff17d
-
Size
126KB
-
MD5
0f77fc62d696fe7d2b0b72b40fb20f0d
-
SHA1
a08ffdaf6618c272f02f307e0dfc54ca12e2159e
-
SHA256
6032c74c728791fbc629758c070867dc2379090464f6077779221398758ff17d
-
SHA512
84ef9b362a88af3521491a53a82c1d85dd5b1ad5c267e8b4bd07d1ff4fb28052a78a19214f1c255bccca410c05dd833e3e23611dae84a15314fdb76de7124a3b
-
SSDEEP
3072:Wunguf3Rp42Gb4iWKjExCHVhnczDD5K582+:W8f/3o4aMInc9K582+
Malware Config
Signatures
Files
-
6032c74c728791fbc629758c070867dc2379090464f6077779221398758ff17d.exe windows x86
b026b1094c127db25a7e5d2e84dd354c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
GetProcessHeap
GlobalReAlloc
UnhandledExceptionFilter
OpenProcess
GetFileTime
InterlockedCompareExchange
VirtualProtectEx
SetFilePointer
FreeEnvironmentStringsA
GetFileType
GetThreadLocale
DuplicateHandle
msvcrt
_except_handler3
__p__commode
_adjust_fdiv
free
_controlfp
_initterm
calloc
__p__fmode
__setusermatherr
_exit
__p___initenv
__set_app_type
atan2
_XcptFilter
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 770B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE