Static task
static1
Behavioral task
behavioral1
Sample
506b7b737075f3b7e4e413cb60897276a2ad9a2a1e580fe73211a00dfe0af37c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
506b7b737075f3b7e4e413cb60897276a2ad9a2a1e580fe73211a00dfe0af37c.exe
Resource
win10v2004-20221111-en
General
-
Target
506b7b737075f3b7e4e413cb60897276a2ad9a2a1e580fe73211a00dfe0af37c
-
Size
51KB
-
MD5
c41c8e7401469ee50e1a665f4e1387f1
-
SHA1
b768aec2d2123fa58134b79ad5137b2b52c9ea60
-
SHA256
506b7b737075f3b7e4e413cb60897276a2ad9a2a1e580fe73211a00dfe0af37c
-
SHA512
47a7d1468ae5ccc1f88536e3622e228fbe8574d25067e5fb986aab24296951b6d0a6351c15eab5abdf8fb5555181a56b2561536bd5a5d21b5ba39e6cf6420bf9
-
SSDEEP
768:3tXNm2sCV6g3jYbiKY7IVqG0L6HpjxE7xhIEAKIkN5GJlZx60:i231TYy7IVWLItiYSX4lP
Malware Config
Signatures
Files
-
506b7b737075f3b7e4e413cb60897276a2ad9a2a1e580fe73211a00dfe0af37c.exe windows x86
f5029ec329db71d8b65176ab6955ce62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetThreadLocale
GlobalSize
HeapLock
GetModuleHandleA
GetProcAddress
GetStartupInfoA
ResetEvent
VirtualAllocEx
CloseHandle
GetStdHandle
TlsGetValue
ResumeThread
DeleteFileA
GetEnvironmentVariableA
GetHandleInformation
LocalLock
LocalFree
OpenSemaphoreA
CopyFileA
GetTickCount
usp10
ScriptJustify
activeds
ord18
ord22
ord23
ord8
ord12
ord5
ord3
ord16
ord7
ord9
ord17
ord14
ord13
ord6
aclui
ord1
ord2
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ