Static task
static1
Behavioral task
behavioral1
Sample
803516fb024522a36c12894f9868847b4da1680ff30e4a044c2609bfcea14a7b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
803516fb024522a36c12894f9868847b4da1680ff30e4a044c2609bfcea14a7b.exe
Resource
win10v2004-20221111-en
General
-
Target
803516fb024522a36c12894f9868847b4da1680ff30e4a044c2609bfcea14a7b
-
Size
114KB
-
MD5
3e629daa7d24f99e5941222d9d4c870c
-
SHA1
16271549b088b4bbcdd009cd60a529c8221d8cb5
-
SHA256
803516fb024522a36c12894f9868847b4da1680ff30e4a044c2609bfcea14a7b
-
SHA512
1b030ff24a5eba6e6f924860fd4a020951ec5aef2f075a5c9f7194b137e4b4e8f77583b9d9313f9164e27be18743151d5b0091deb2206992a603864eca014cb6
-
SSDEEP
3072:3YH2FKJ6bZM90AaiXi1kuW56IYblOxdVQvSzb:oT6qVaiSW56IiUWo
Malware Config
Signatures
Files
-
803516fb024522a36c12894f9868847b4da1680ff30e4a044c2609bfcea14a7b.exe windows x86
6cc090083447a7ce9f8fd92624829002
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ClearCommBreak
CloseHandle
CreateConsoleScreenBuffer
CreateMutexA
DosDateTimeToFileTime
ExitProcess
FindAtomA
FindCloseChangeNotification
FindResourceExA
FlushViewOfFile
GetAtomNameA
GetBinaryTypeA
GetCommandLineA
GetExitCodeThread
GetFileInformationByHandle
GetLocalTime
GetModuleHandleA
GetNamedPipeInfo
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStructA
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetThreadTimes
LocalFree
LocalReAlloc
LockFile
QueryPerformanceCounter
ReadFile
ResetEvent
SetEvent
SetFileAttributesA
SetUnhandledExceptionFilter
SignalObjectAndWait
SizeofResource
Sleep
SleepEx
VirtualLock
WriteProfileStringA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
free
ftell
fwrite
malloc
memset
rand
rewind
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE