Static task
static1
Behavioral task
behavioral1
Sample
2dfc8df06a46728fede1cd26cd942c9e6f38996d0c20212f2e8364e6c5053fe5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2dfc8df06a46728fede1cd26cd942c9e6f38996d0c20212f2e8364e6c5053fe5.exe
Resource
win10v2004-20220812-en
General
-
Target
2dfc8df06a46728fede1cd26cd942c9e6f38996d0c20212f2e8364e6c5053fe5
-
Size
119KB
-
MD5
4692bfa6201af2ec22fa1a5c37d51a5b
-
SHA1
776513c50e97a45953d62416b2a0e28c3d3fcf65
-
SHA256
2dfc8df06a46728fede1cd26cd942c9e6f38996d0c20212f2e8364e6c5053fe5
-
SHA512
f9e01c0b46035c358df5496f312dad8bf023e04c5e29949bc57bd92fb98a4446f2151d01e09b1297c8acfe0b0328203017b8761c735cc29bc057f08ac9235bc9
-
SSDEEP
3072:PxcMrRV1k48JiN23sIoovzr8AgNFRk4aO:PxL3Sv3s9o7OfRA
Malware Config
Signatures
Files
-
2dfc8df06a46728fede1cd26cd942c9e6f38996d0c20212f2e8364e6c5053fe5.exe windows x86
26ceed180cbd874ef717c747b708c628
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_XcptFilter
__p___initenv
__set_app_type
free
calloc
__getmainargs
_exit
_controlfp
__p__commode
_initterm
__p__fmode
__setusermatherr
_adjust_fdiv
_except_handler3
kernel32
WaitForMultipleObjects
SetEnvironmentVariableA
SetFileAttributesW
DuplicateHandle
VirtualProtectEx
GetCurrentProcessId
GetCommandLineW
TerminateProcess
SystemTimeToFileTime
GetModuleHandleW
MoveFileA
WriteConsoleA
VirtualQuery
GetProcessHeap
GetFileType
GetProcAddress
GetTempPathW
SetFileTime
GetPrivateProfileStringA
GetEnvironmentStringsW
lstrcpynA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ