Static task
static1
Behavioral task
behavioral1
Sample
f29b36daba68f0fcb51c9f6afd1f5bff035e5412315f03d63e977e4e5e21d5d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f29b36daba68f0fcb51c9f6afd1f5bff035e5412315f03d63e977e4e5e21d5d0.exe
Resource
win10v2004-20221111-en
General
-
Target
f29b36daba68f0fcb51c9f6afd1f5bff035e5412315f03d63e977e4e5e21d5d0
-
Size
76KB
-
MD5
f3a263b627add8881714c88d85b9ef8b
-
SHA1
0187cb208e6fd75a490a8982a5e6bb65afe07882
-
SHA256
f29b36daba68f0fcb51c9f6afd1f5bff035e5412315f03d63e977e4e5e21d5d0
-
SHA512
e7bf18b4e223c8706760b1c652000c6fa4ee0dd2cfd63d575a557d164ca51b74421b6033961a8ca3f2b435327364f16d85c713f1ea1af09a258a65cee1249e34
-
SSDEEP
1536:mBD061okTY2Z47EnmaTXlyhEutJCFpjVrs2ryrd1vUQuq6:mZLolO2hEutQFHs2qo
Malware Config
Signatures
Files
-
f29b36daba68f0fcb51c9f6afd1f5bff035e5412315f03d63e977e4e5e21d5d0.exe windows x86
5533508d861641add11b70835292f3c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemLanguageGroupsW
GlobalMemoryStatusEx
GetFileSizeEx
GetPrivateProfileStringA
_lread
FindNextChangeNotification
GetConsoleCommandHistoryLengthA
VirtualFreeEx
InterlockedCompareExchange
OpenEventW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE