Static task
static1
Behavioral task
behavioral1
Sample
420548648a07452e1fe88c832ae9bb9c7564d85274e5b7ac40915eaa27efafd2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
420548648a07452e1fe88c832ae9bb9c7564d85274e5b7ac40915eaa27efafd2.exe
Resource
win10v2004-20220901-en
General
-
Target
420548648a07452e1fe88c832ae9bb9c7564d85274e5b7ac40915eaa27efafd2
-
Size
56KB
-
MD5
439a1c2c28f761e8c66369d64886caa1
-
SHA1
3c9b6f2d59920635004ed495184faa7e5a1a5e37
-
SHA256
420548648a07452e1fe88c832ae9bb9c7564d85274e5b7ac40915eaa27efafd2
-
SHA512
6e461044a9d80b936dd90d061a35e9ea71d7c60df8effc6778b3326986fc03dadfbee88a936902cde9ac790b5d8a800a40492acafb0fec46e858a9404caa541f
-
SSDEEP
768:n+U6nzYv06tkWVLMKTR7Z2jXGTLHRnGlvo5MqTRjp0AanyV9f1AKDP:nozYMWkcTR7ZdJaolTRjpmQd
Malware Config
Signatures
Files
-
420548648a07452e1fe88c832ae9bb9c7564d85274e5b7ac40915eaa27efafd2.exe windows x86
d4e3cfac9f0a99a7e5d578efc795293f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
realloc
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
free
imagehlp
MakeSureDirectoryPathExists
wininet
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
kernel32
CloseHandle
Sleep
FreeLibrary
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
GetProcessHeap
HeapAlloc
CreateFileA
ReadFile
GetFileSize
SetFilePointer
GetModuleHandleA
GetStartupInfoA
WriteFile
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
npwkheq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE