Static task
static1
Behavioral task
behavioral1
Sample
148570a03aa5bd071db30acc1c8a94586761cd5fbd743f37e5fda03e6f341abc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
148570a03aa5bd071db30acc1c8a94586761cd5fbd743f37e5fda03e6f341abc.exe
Resource
win10v2004-20221111-en
General
-
Target
148570a03aa5bd071db30acc1c8a94586761cd5fbd743f37e5fda03e6f341abc
-
Size
142KB
-
MD5
a64b661d7535d73c92a7cdc95651a8aa
-
SHA1
989f294d1de55b8c116ea95e17e87e05d2817ea7
-
SHA256
148570a03aa5bd071db30acc1c8a94586761cd5fbd743f37e5fda03e6f341abc
-
SHA512
5def11315d2ba505d51c19236d70d3b178c4c904a195448814fae95ea4ea580f85d13834bc7e0a9add0c372cb62c14ad18dcca6f220bba50e730ad13d41f0e9d
-
SSDEEP
3072:NBkUC5/tsUnBrNb38qwUCwSwn9y4OhaVAS7q:NFs/uUnBrl389vwnYhkAS
Malware Config
Signatures
Files
-
148570a03aa5bd071db30acc1c8a94586761cd5fbd743f37e5fda03e6f341abc.exe windows x86
9c4f5381d36a8f473c363feb25565f18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetLocaleInfoW
GetModuleHandleA
msvcrt
_XcptFilter
_findclose
_inpd
_chkesp
_strtoui64
_pipe
__p__commode
_ftime
ctime
strpbrk
_lseek
_wcsnicoll
_stricmp
putc
_environ
_get_heap_handle
_mbctohira
_ismbcprint
fwscanf
_initterm
memcmp
_mbschr
_cwait
_exit
_wexeclp
__set_app_type
fgetwc
_beginthread
_mbsncat
strspn
fclose
_purecall
_wcsicoll
_findnext
putwchar
_mbsicmp
fmod
_heapset
_spawnv
_ltow
wcscat
wcsxfrm
__getmainargs
__setusermatherr
_copysign
_controlfp
_adjust_fdiv
log
_lrotr
_except_handler3
ldexp
_mbsspnp
__p__fmode
memcpy
_acmdln
_findnexti64
exit
_wfsopen
_unloaddll
_mbsnbicoll
sprintf
_outpd
iswlower
difftime
_wfindfirsti64
_wcserror
_strlwr
frexp
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ