Static task
static1
Behavioral task
behavioral1
Sample
b76385f8c322bd0903f08cfad6018b2506604f96b3653c9060fe79f9fcd3f459.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b76385f8c322bd0903f08cfad6018b2506604f96b3653c9060fe79f9fcd3f459.exe
Resource
win10v2004-20220812-en
General
-
Target
b76385f8c322bd0903f08cfad6018b2506604f96b3653c9060fe79f9fcd3f459
-
Size
179KB
-
MD5
f5c0cf8afe31bfc0ff0585f7fd78bfed
-
SHA1
cd8de30f3db0fd8a7accee9e74376621e1764f31
-
SHA256
b76385f8c322bd0903f08cfad6018b2506604f96b3653c9060fe79f9fcd3f459
-
SHA512
f1e186486c164df6161a52734611af87a5ee9ae8640bec3ac53509837cc3fc5659b73eb02005f0fd71ae16c5d196192ed7e22ad0e4e76194f1b1349221cb0ce9
-
SSDEEP
3072:v068vhO6kq1D6ggl37EtnN/g5oG3cjOJfdSGz6p7e03QYtRI:sByGgl3YyQil6e0/
Malware Config
Signatures
Files
-
b76385f8c322bd0903f08cfad6018b2506604f96b3653c9060fe79f9fcd3f459.exe windows x86
ffdae5962768e3005686f27787c83550
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetCommandLineW
GetModuleHandleA
GetLastError
GetProcAddress
GetModuleHandleW
VirtualAlloc
ExitProcess
LoadLibraryA
IsBadReadPtr
GetCommandLineA
ExitThread
IsBadHugeReadPtr
Sections
CODE Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ