Static task
static1
Behavioral task
behavioral1
Sample
38506b1be37578bbba0fd2ede055b378d57acb624613f7c94c852774df8bd674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38506b1be37578bbba0fd2ede055b378d57acb624613f7c94c852774df8bd674.exe
Resource
win10v2004-20220812-en
General
-
Target
38506b1be37578bbba0fd2ede055b378d57acb624613f7c94c852774df8bd674
-
Size
192KB
-
MD5
06feeda8b326b92bcd028a2d5680a702
-
SHA1
b6f5a06474f4ace83703c3fd33a7033f98e0d5c8
-
SHA256
38506b1be37578bbba0fd2ede055b378d57acb624613f7c94c852774df8bd674
-
SHA512
3236ed7279b7d3ef79ebbee9d46592906362da874b713d6f9a4608b7804cd68b194c15b2427c1d23b00b91314b5ee856d7be00fc891a103f18b2b90b970653fa
-
SSDEEP
3072:mENQitAfP9ZGFwgvRLLCzOYFDq+UdnIPPlMzcsofIw+KaX0LcHLkMIIRvQR:dN896wgvRHCzOYtqlGyzcsX3KA0LQIQQ
Malware Config
Signatures
Files
-
38506b1be37578bbba0fd2ede055b378d57acb624613f7c94c852774df8bd674.exe windows x86
63f44aaa197d252437b9a784f709b6a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualProtect
VirtualFree
IsBadReadPtr
FreeLibrary
HeapReAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ