Static task
static1
Behavioral task
behavioral1
Sample
252105cc6bf0c130f5fa09cb5410ea2739bd170f6c0230b2f4dbc4cb6cec74c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
252105cc6bf0c130f5fa09cb5410ea2739bd170f6c0230b2f4dbc4cb6cec74c1.exe
Resource
win10v2004-20221111-en
General
-
Target
252105cc6bf0c130f5fa09cb5410ea2739bd170f6c0230b2f4dbc4cb6cec74c1
-
Size
115KB
-
MD5
ea0b0422b64f9f22595b411116587a6c
-
SHA1
b9bddc04f49f4efc4355d602ff6ef11480dfb8b5
-
SHA256
252105cc6bf0c130f5fa09cb5410ea2739bd170f6c0230b2f4dbc4cb6cec74c1
-
SHA512
2d8716b5322462b163267ebe5374c7fc5d11a0a48391401956b4d024772d2878047b9efc915503b5621d349698e623ef03e4ff526323b15721ce702e8e97b1e1
-
SSDEEP
3072:3D91s7655nBeiQoExINu9cEkNO3SqF57akq:3x1s7655ngiQoAaumWV6kq
Malware Config
Signatures
Files
-
252105cc6bf0c130f5fa09cb5410ea2739bd170f6c0230b2f4dbc4cb6cec74c1.exe windows x86
17f0536d035b689fdecd32aa5627195b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CancelIo
CopyFileA
CreateFileA
CreateMutexA
DeleteFileA
ExitProcess
FindAtomA
FindClose
FlushFileBuffers
GetACP
GetAtomNameA
GetCommandLineA
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentVariableA
GetLargestConsoleWindowSize
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetProcAddress
GetProfileSectionA
GetStartupInfoA
GetTickCount
GlobalFree
HeapFree
IsBadReadPtr
MapViewOfFile
MulDiv
PeekNamedPipe
ResumeThread
SetEvent
SetFileTime
SetUnhandledExceptionFilter
SleepEx
WaitNamedPipeA
WideCharToMultiByte
WriteProfileSectionA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
free
malloc
memset
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE