fehj
Static task
static1
Behavioral task
behavioral1
Sample
b38160752386c23090e62d285e9b1407d1f19250b0161970d47b456951abed5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b38160752386c23090e62d285e9b1407d1f19250b0161970d47b456951abed5d.exe
Resource
win10v2004-20220812-en
General
-
Target
b38160752386c23090e62d285e9b1407d1f19250b0161970d47b456951abed5d
-
Size
240KB
-
MD5
239fc736bd4f5a94e75f5f4744cb9282
-
SHA1
6c4be5d69d22e3f8985297bcbb7708763282a455
-
SHA256
b38160752386c23090e62d285e9b1407d1f19250b0161970d47b456951abed5d
-
SHA512
5f55875a506e35dd6e0ba8bf2fd10c82932580c5fc2b6cf74ae6201685c3a87e69d86c71ecee56a72ba14d01ed9b365274dd9fd5d0d4ea08466162b79aa1c8c8
-
SSDEEP
6144:6wF96wgvRHCzOYtqlGyzcsX3KA0LQIQRRpG:VX3gNCpOdn/uZ
Malware Config
Signatures
Files
-
b38160752386c23090e62d285e9b1407d1f19250b0161970d47b456951abed5d.exe windows x86
820138815a1b40c6dfc10eb80b2ef7ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ