Static task
static1
Behavioral task
behavioral1
Sample
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe
Resource
win10v2004-20221111-en
General
-
Target
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f
-
Size
332KB
-
MD5
39a95f20d3151db93c0bfc7403d0d361
-
SHA1
5f128bb6d35f74be06f6250a896bc49f082dfb6e
-
SHA256
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f
-
SHA512
a16373c3191c3eaa57c9d30b96edd3afd57683850aa4fe006f3bd9ac6248ae9c55946ad5a15e98bbb85f8966e4acf8942a31aca19e9f31ea63e7a27fd121d0a6
-
SSDEEP
6144:b+F1K4yIy+gQQtoYpUrzUQA+DGymR9XdiO3yf6aTUXYNi4RVc5w:Z7vhOuUrFCbd/y7q1w
Malware Config
Signatures
Files
-
900bc16212163fffbaf4368d8cc636669ca313851b85e29e2e0f81886229db8f.exe windows x86
b90c291c5596cbf2f64c2d50268b794c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
ResumeThread
GetCommandLineA
VirtualLock
GetModuleHandleA
CreateEventA
GetProcAddress
VirtualAlloc
Sleep
ResetEvent
user32
GetParent
LoadIconA
LoadCursorA
advapi32
CryptAcquireContextA
CryptGenKey
ole32
CoUninitialize
avifil32
AVIStreamBeginStreaming
AVIBuildFilterA
msvfw32
DrawDibSetPalette
DrawDibBegin
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ