Static task
static1
Behavioral task
behavioral1
Sample
04f32308b01d0d7972970953c0101f2da22fd0fd23956921b5385252dfd5baac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04f32308b01d0d7972970953c0101f2da22fd0fd23956921b5385252dfd5baac.exe
Resource
win10v2004-20221111-en
General
-
Target
04f32308b01d0d7972970953c0101f2da22fd0fd23956921b5385252dfd5baac
-
Size
32KB
-
MD5
401c30db7e63342e13e33f1b1ba24150
-
SHA1
9e4fed6e6c105656ac0e820a5c14b1071c9a5aaa
-
SHA256
04f32308b01d0d7972970953c0101f2da22fd0fd23956921b5385252dfd5baac
-
SHA512
8cb1ea0fe1b08369ff427dc0fa7e0ec85de93b5d94f613ca55a243a1163af684639cbcec297460bf494bcdd0ed5241bcc938369f3edbe1b607b6c7504a97184c
-
SSDEEP
768:B1UxuFzTx9pdGCDDTcVYi9SGBe/ynWoYzpsG:DzZdclSlqwps
Malware Config
Signatures
Files
-
04f32308b01d0d7972970953c0101f2da22fd0fd23956921b5385252dfd5baac.exe windows x86
e2af5e3332d5b1979980caff017568ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
msvcrt
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_c_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
_initterm
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qohzasp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE