Static task
static1
Behavioral task
behavioral1
Sample
0df2453eea4251dd0bc4fcb7f97fa78817d83dd1777aca2038c4286c1625ecf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0df2453eea4251dd0bc4fcb7f97fa78817d83dd1777aca2038c4286c1625ecf9.exe
Resource
win10v2004-20220812-en
General
-
Target
0df2453eea4251dd0bc4fcb7f97fa78817d83dd1777aca2038c4286c1625ecf9
-
Size
246KB
-
MD5
c8463daea4102c69d04d025dc2a40639
-
SHA1
c10d84b0d9106d6c149065f983e60f93225b9f3c
-
SHA256
0df2453eea4251dd0bc4fcb7f97fa78817d83dd1777aca2038c4286c1625ecf9
-
SHA512
a7a814378982b9f787fe462d7c5f47b00d0cd519739df0765a8f14b2e62fc63bc0d0f00f46a359526dacf2a7ee19003f72b2275f7ab320b4f6e44afaafa6e6cc
-
SSDEEP
6144:pYiSDS6NLK9biG42JKsvt9tcjvpP90ZNMF2qIccnd:LSNFmz427vtPcjd90HA2q3yd
Malware Config
Signatures
Files
-
0df2453eea4251dd0bc4fcb7f97fa78817d83dd1777aca2038c4286c1625ecf9.exe windows x86
b91acf71a51daf8cbb9ca4bf329719b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
memset
_chkstk
kernel32
GetStartupInfoA
OutputDebugStringA
GetProcAddress
ExitProcess
MultiByteToWideChar
GetModuleHandleA
msvcrt
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 239KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opei Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ