Static task
static1
Behavioral task
behavioral1
Sample
af74b748d82e5cc235609cc91ee3860a0f954213790980b628bcb5618ee11da4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af74b748d82e5cc235609cc91ee3860a0f954213790980b628bcb5618ee11da4.exe
Resource
win10v2004-20220812-en
General
-
Target
af74b748d82e5cc235609cc91ee3860a0f954213790980b628bcb5618ee11da4
-
Size
145KB
-
MD5
1fdc0e2d44f310c6a34b0ce533fe71c0
-
SHA1
9f424a2ed1fa9d2b0827c5af8cccbf73332b69be
-
SHA256
af74b748d82e5cc235609cc91ee3860a0f954213790980b628bcb5618ee11da4
-
SHA512
f1291db5def0ce5a7f356204131f2fd17cf0e40ddd84ca70f123d854ccca3fcad389941cc09ec134beb4cbcdbd8b1616bb606d45d7b7486a4e5c519a23272f68
-
SSDEEP
3072:ywoo1becnWzsDLidFY6/otFJEd/jCxRZaLWHLrMOrFIunsJFl3J4:yjo0m/LO+6SFmdbCxR0CHLrrrFIunY3G
Malware Config
Signatures
Files
-
af74b748d82e5cc235609cc91ee3860a0f954213790980b628bcb5618ee11da4.exe windows x86
041d8efbdc4cdaae253f4a3c7918b192
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
WriteFile
GetLastError
CreateFileA
GetStdHandle
GetModuleFileNameA
MultiByteToWideChar
GetFileType
HeapFree
LoadLibraryA
GetLocaleInfoA
FreeLibrary
GetProcessHeap
HeapAlloc
FormatMessageA
SystemTimeToFileTime
lstrcmpiA
crtdll
__GetMainArgs
exit
raise
signal
pdh
PdhCloseLog
PdhAddCounterW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetSidLengthRequired
RegSetValueExA
RegCreateKeyExA
user32
LoadStringA
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 340B - Virtual size: 340B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ