Static task
static1
Behavioral task
behavioral1
Sample
19f0f24e9552bbb25c85a05b2cc75dfbb99ea842f27fe56a60e86316cb06cb69.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
19f0f24e9552bbb25c85a05b2cc75dfbb99ea842f27fe56a60e86316cb06cb69.exe
Resource
win10v2004-20220812-en
General
-
Target
19f0f24e9552bbb25c85a05b2cc75dfbb99ea842f27fe56a60e86316cb06cb69
-
Size
608KB
-
MD5
095336d08edb23cd2107a6747d0f7490
-
SHA1
671732284ef7b5d2fac077d7c36c2a4163e1c821
-
SHA256
19f0f24e9552bbb25c85a05b2cc75dfbb99ea842f27fe56a60e86316cb06cb69
-
SHA512
c104776aabd36aa1e03cb01182c9a93441912f3d7362dba4c0d1c8757b0361080e1db7cb2b9c686aaa8f5ad4a3561056585fc042b2bb639361246b7ed372400d
-
SSDEEP
12288:ht2CgZp+kjg2aZVN4fpfQzsvlKSWYgEo23fJzl5+UYOdt3N9WQ2bNNAPf564eNlX:r81la3N+yzsv0w5v9t3jCc5i5
Malware Config
Signatures
Files
-
19f0f24e9552bbb25c85a05b2cc75dfbb99ea842f27fe56a60e86316cb06cb69.exe windows x86
1f52399bde2e242245825b91f13af081
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
lstrlenW
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentThreadId
GetCommandLineA
WideCharToMultiByte
lstrlenA
InitializeCriticalSection
LocalFree
LocalAlloc
FormatMessageA
GetStartupInfoA
GetModuleHandleA
user32
wsprintfA
MessageBoxA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysAllocStringByteLen
SysFreeString
msvcrt
strcpy
exit
_acmdln
_lseek
_read
_open
_XcptFilter
_strnicmp
strncpy
toupper
strcat
strrchr
strchr
_close
strlen
isspace
__CxxFrameHandler
memcmp
??3@YAXPAX@Z
_exit
__p__commode
_strlwr
__p__fmode
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 592KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE