Static task
static1
Behavioral task
behavioral1
Sample
911f2f0bb087772ac5fdfa3175f00b8ea9b3f725f7d75fd04c551638bfad2b69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
911f2f0bb087772ac5fdfa3175f00b8ea9b3f725f7d75fd04c551638bfad2b69.exe
Resource
win10v2004-20220812-en
General
-
Target
911f2f0bb087772ac5fdfa3175f00b8ea9b3f725f7d75fd04c551638bfad2b69
-
Size
187KB
-
MD5
0f2133769f74dfafd50ad289bd6d9440
-
SHA1
5f07751ee64288d764337a7d35769b9b410b0806
-
SHA256
911f2f0bb087772ac5fdfa3175f00b8ea9b3f725f7d75fd04c551638bfad2b69
-
SHA512
74165cf1165bd9e016da99473b8b6fa3b326433a08994b30ea74e970f9624c263cdf2baef9261c4290de55dadff8be1f5e3af87c97a441c9f1889e550e3c12ce
-
SSDEEP
192:x1e3P1S4WkVH3lg2ag9EtGmLJv4ul44vd02JE/80+QoneShqAs1nFz:q1S4hVH1J9EtGqA04h2gN+Qonfih
Malware Config
Signatures
Files
-
911f2f0bb087772ac5fdfa3175f00b8ea9b3f725f7d75fd04c551638bfad2b69.exe windows x86
0814b6bee25b5e24fb0cda5dddf15e16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateProcessA
ExitProcess
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersionExA
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
msvcrt
_strdup
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
_strnicmp
abort
atexit
exit
fflush
fgets
fopen
free
malloc
memcpy
memset
printf
putchar
puts
signal
strlen
strncmp
user32
CallNextHookEx
CreateWindowExA
DestroyWindow
SetWindowsHookExA
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE