Static task
static1
Behavioral task
behavioral1
Sample
875f47898ff676e0e3345b3559ccbad2c5a425efa76a8178464244cd8a324906.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
875f47898ff676e0e3345b3559ccbad2c5a425efa76a8178464244cd8a324906.exe
Resource
win10v2004-20221111-en
General
-
Target
875f47898ff676e0e3345b3559ccbad2c5a425efa76a8178464244cd8a324906
-
Size
76KB
-
MD5
46426aac819a506789a6349d38709932
-
SHA1
4c68331a9f967d2c59370a7bb6976037e2ee4b26
-
SHA256
875f47898ff676e0e3345b3559ccbad2c5a425efa76a8178464244cd8a324906
-
SHA512
be536d4fc976f42e6693670c45ceb0280b7bc3ff37895f9fd033884b4bb4ba7d192cf50c931ea25c3076ff4401ba62a1acf2fc41edc6e2657eadfe9492922d9e
-
SSDEEP
1536:FgFKdW+SLXGOmLq+7vVO/CA9wMJCfakxQHvlpjVrs2ryrd1vUQuq6:jdfSLX9mmYv0GkWakxQHvlHs2qo
Malware Config
Signatures
Files
-
875f47898ff676e0e3345b3559ccbad2c5a425efa76a8178464244cd8a324906.exe windows x86
bc6fa4192b2f1b007744b83772b71d36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedPushEntrySList
GetPrivateProfileStructW
BaseCleanupAppcompatCacheSupport
InterlockedCompareExchange
OpenWaitableTimerW
VDMOperationStarted
WriteProfileSectionA
BaseFlushAppcompatCache
GlobalLock
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE