Static task
static1
Behavioral task
behavioral1
Sample
90c5a628704ebb96be43a9a0c9d84351a0b388802bbea3643c311dac4de62796.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
90c5a628704ebb96be43a9a0c9d84351a0b388802bbea3643c311dac4de62796.exe
Resource
win10v2004-20221111-en
General
-
Target
90c5a628704ebb96be43a9a0c9d84351a0b388802bbea3643c311dac4de62796
-
Size
123KB
-
MD5
7934edfe1715a8b2bdfedb1221a91dcd
-
SHA1
f10097680a0c804fb88fd1c2210c77324a5e3fce
-
SHA256
90c5a628704ebb96be43a9a0c9d84351a0b388802bbea3643c311dac4de62796
-
SHA512
15b39dcec2aaba501d67ed3bd9c2d1d5c3d017be60a9f1a7d6fdde13042dd5e288343bce1c3b3a9c2f7adfc31e2b739283027c9ba6b3518c7f1a682e6e065c6b
-
SSDEEP
3072:kcvrsZhaOb4kM4HJ4+tj1h5KUwv/XnSLTUX3kUXPDQ46Oc:kJaObX4+1WX7Hd7Q
Malware Config
Signatures
Files
-
90c5a628704ebb96be43a9a0c9d84351a0b388802bbea3643c311dac4de62796.exe windows x86
0121f545ff4d2f1d0fbc6d06cb81ba1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ContinueDebugEvent
CreateIoCompletionPort
CreateRemoteThread
CreateWaitableTimerA
DeviceIoControl
DosDateTimeToFileTime
ExitProcess
FindAtomA
FlushConsoleInputBuffer
FreeConsole
GetAtomNameA
GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetProfileIntA
GetProfileStringA
GetStartupInfoA
GetTempPathA
GetUserDefaultLangID
GlobalFlags
GlobalLock
HeapCreate
HeapFree
HeapValidate
LoadLibraryExA
LocalHandle
MultiByteToWideChar
PostQueuedCompletionStatus
PulseEvent
SetEvent
SetLastError
SetUnhandledExceptionFilter
SizeofResource
UnlockFile
UnmapViewOfFile
VirtualQueryEx
VirtualUnlock
WaitForMultipleObjects
WaitForMultipleObjectsEx
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
free
ftell
fwrite
malloc
memset
rand
rewind
signal
time
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE