Static task
static1
Behavioral task
behavioral1
Sample
f872dbfc9a0413cdf2f797ee476671b4d17ce215724a1f0b57599606cdec6ecb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f872dbfc9a0413cdf2f797ee476671b4d17ce215724a1f0b57599606cdec6ecb.exe
Resource
win10v2004-20221111-en
General
-
Target
f872dbfc9a0413cdf2f797ee476671b4d17ce215724a1f0b57599606cdec6ecb
-
Size
123KB
-
MD5
2fb6d3d9cf4aa08c3a8adae085e79ab9
-
SHA1
e54dc0df3acff6207ceee0364bce4944697049de
-
SHA256
f872dbfc9a0413cdf2f797ee476671b4d17ce215724a1f0b57599606cdec6ecb
-
SHA512
ceb24d128125039a538c7751aeb36e7a709c9a8d1cbc7ae6daed8c875e982814edff502a4e84d7148d4bb1085b4006b68c7d3f99b6e212515aa9225bf86f2dff
-
SSDEEP
3072:5M6b6623KGoh1DLJoRRVBQRKWK8RWcddgewrMznK9ANjsF4cc:Kk6vK5h1W8RKWK8sjHQqAyucc
Malware Config
Signatures
Files
-
f872dbfc9a0413cdf2f797ee476671b4d17ce215724a1f0b57599606cdec6ecb.exe windows x86
42bcec22797039ddc92733f7037d3c3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
Beep
CreateDirectoryExA
CreateSemaphoreA
DeleteFileA
EndUpdateResourceA
ExitProcess
FindAtomA
FindClose
FlushFileBuffers
FlushViewOfFile
GetAtomNameA
GetCommandLineA
GetExitCodeThread
GetLastError
GetMailslotInfo
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeHandleStateA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetProcAddress
GetProfileIntA
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriorityBoost
GetThreadTimes
GlobalAddAtomA
GlobalReAlloc
IsBadStringPtrA
IsBadWritePtr
IsProcessorFeaturePresent
LockFile
OutputDebugStringA
QueryDosDeviceA
ReleaseMutex
ResumeThread
SetEvent
SetFileAttributesA
SetUnhandledExceptionFilter
SignalObjectAndWait
WaitForSingleObject
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
free
malloc
memset
rand
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE