Static task
static1
Behavioral task
behavioral1
Sample
1643bdb71574e0a5ddf41d84e667ccffdb2876189c1e4a5c90717329082141e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1643bdb71574e0a5ddf41d84e667ccffdb2876189c1e4a5c90717329082141e4.exe
Resource
win10v2004-20220901-en
General
-
Target
1643bdb71574e0a5ddf41d84e667ccffdb2876189c1e4a5c90717329082141e4
-
Size
1.0MB
-
MD5
6a67d59dde58df026ec7d98ce8a90b66
-
SHA1
37b833950c5cf504be90324b0c0f704d842c7ad3
-
SHA256
1643bdb71574e0a5ddf41d84e667ccffdb2876189c1e4a5c90717329082141e4
-
SHA512
398edb02fbd60e7647d75dd44cae648203f3a5034b2530d7c1cadb144008badce7d8d3ce0e5d6f6da067759321aeea6727ffe9f9132475ce16a2bd225e373db3
-
SSDEEP
3072:UbZwdS8ZiRYpFKyMxboa5RZR+hedYhhThfHZMKfBVnfE1ZJMuNmFLyFN1ue7bpoK:HfBq1PMuN6yFR3KngFvxdbq2tTBX6To
Malware Config
Signatures
Files
-
1643bdb71574e0a5ddf41d84e667ccffdb2876189c1e4a5c90717329082141e4.exe windows x86
3d4459d16aa6c47fcb4608508cec552c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
DuplicateHandle
RemoveDirectoryA
OpenEventW
SetFilePointer
FindNextFileA
UnlockFile
LocalSize
LocalHandle
OpenThread
LoadResource
FindResourceA
FindClose
PulseEvent
SetEvent
GetTickCount
FindAtomA
DeleteAtom
Sleep
CompareStringA
CreatePipe
ReleaseMutex
MoveFileA
OpenSemaphoreW
SystemTimeToFileTime
DeleteFileW
OpenEventA
WriteFile
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
mfc42
ord823
msvcrt
memcpy
__CxxFrameHandler
_ftol
_CxxThrowException
_purecall
malloc
free
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_controlfp
sprintf
_acmdln
Sections
.text Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ