Static task
static1
Behavioral task
behavioral1
Sample
538249c5804958101433492aed2b4359dc05a64522d9864d95df42018b4dd698.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
538249c5804958101433492aed2b4359dc05a64522d9864d95df42018b4dd698.exe
Resource
win10v2004-20221111-en
General
-
Target
538249c5804958101433492aed2b4359dc05a64522d9864d95df42018b4dd698
-
Size
142KB
-
MD5
f53cb82774d8b71927563b1f76099f49
-
SHA1
66b8c7e68bd564675f3fa5ccb5bc218d74dbce6f
-
SHA256
538249c5804958101433492aed2b4359dc05a64522d9864d95df42018b4dd698
-
SHA512
4ebfdd32e02d61aa2b5e5b7d95cf547886e9b796219288cc8417bf4b1efb6287ecf1add9fd512415e679505aa61e33bb4b746786b2d65638fec62b1b151167ae
-
SSDEEP
3072:TBkUC5/tsUnBrNb38qwUCwSwn9y4OhaVAS7q:TFs/uUnBrl389vwnYhkAS
Malware Config
Signatures
Files
-
538249c5804958101433492aed2b4359dc05a64522d9864d95df42018b4dd698.exe windows x86
9c4f5381d36a8f473c363feb25565f18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetLocaleInfoW
GetModuleHandleA
msvcrt
_XcptFilter
_findclose
_inpd
_chkesp
_strtoui64
_pipe
__p__commode
_ftime
ctime
strpbrk
_lseek
_wcsnicoll
_stricmp
putc
_environ
_get_heap_handle
_mbctohira
_ismbcprint
fwscanf
_initterm
memcmp
_mbschr
_cwait
_exit
_wexeclp
__set_app_type
fgetwc
_beginthread
_mbsncat
strspn
fclose
_purecall
_wcsicoll
_findnext
putwchar
_mbsicmp
fmod
_heapset
_spawnv
_ltow
wcscat
wcsxfrm
__getmainargs
__setusermatherr
_copysign
_controlfp
_adjust_fdiv
log
_lrotr
_except_handler3
ldexp
_mbsspnp
__p__fmode
memcpy
_acmdln
_findnexti64
exit
_wfsopen
_unloaddll
_mbsnbicoll
sprintf
_outpd
iswlower
difftime
_wfindfirsti64
_wcserror
_strlwr
frexp
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ