TMethodImplementationIntercept
Static task
static1
Behavioral task
behavioral1
Sample
31ff202998a4db3d24b91dba76525ecd46b620fe59d90a5c89b123ae01fd814e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
31ff202998a4db3d24b91dba76525ecd46b620fe59d90a5c89b123ae01fd814e.exe
Resource
win10v2004-20221111-en
General
-
Target
31ff202998a4db3d24b91dba76525ecd46b620fe59d90a5c89b123ae01fd814e
-
Size
8.6MB
-
MD5
6197c1e127804f98d474af72625974b8
-
SHA1
57507fa494369e79de2c57ca7a68a3c8c851d6c2
-
SHA256
31ff202998a4db3d24b91dba76525ecd46b620fe59d90a5c89b123ae01fd814e
-
SHA512
0a48c97228890f137a7debfc2b3bc09a467624cf1263b8aa8465468efb89dcd73f0f8bd5629ce79a0783cecd20e8be79bf0b2226c99e25bf839d60efa4a29b03
-
SSDEEP
196608:Tkq+B1mpXDNy/ebKtvcA4MhPr49FOeTcpifFSreqfyi8yv:nOUXDNb+TreFnmiUqQyq
Malware Config
Signatures
Files
-
31ff202998a4db3d24b91dba76525ecd46b620fe59d90a5c89b123ae01fd814e.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 1.5MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
felgixhk Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
daxkmxkj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE