Static task
static1
Behavioral task
behavioral1
Sample
b10a449d3bfb4c80ec3837c72f3470b11c4471f3bdb2e3f353fb30749e601673.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b10a449d3bfb4c80ec3837c72f3470b11c4471f3bdb2e3f353fb30749e601673.exe
Resource
win10v2004-20221111-en
General
-
Target
b10a449d3bfb4c80ec3837c72f3470b11c4471f3bdb2e3f353fb30749e601673
-
Size
163KB
-
MD5
b4e97cb84697b0faea63ff74bfe8a91a
-
SHA1
a6d645c2a45c8ee70a8ce02804271c4761d7af66
-
SHA256
b10a449d3bfb4c80ec3837c72f3470b11c4471f3bdb2e3f353fb30749e601673
-
SHA512
001d407c5c9ad3b278c0facf2d36c29171837c8ef5a4b50f94debe31cc9e6798620142b7257110866c8cbae0a1cb63cb4d5757e98ff73194934469e97038a8a7
-
SSDEEP
3072:x+WkcQUQ9C0g1Zss2CG7ts+U0CZYsgPHuvxrj3zdfAnMk6snue+WyYXFq:1oz9C0g1Zss2r7ts3tgPHuJj3BfCk1Wl
Malware Config
Signatures
Files
-
b10a449d3bfb4c80ec3837c72f3470b11c4471f3bdb2e3f353fb30749e601673.exe windows x86
881a73e82bd83f15b6e78581ee0b992d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
LoadLibraryExA
QueryPerformanceFrequency
CreateEventA
GetModuleHandleA
ReadFile
CompareStringA
CompareStringW
GlobalSize
SizeofResource
FreeResource
SearchPathA
FindNextFileA
GetTempFileNameA
GetExitCodeProcess
TerminateProcess
OpenProcess
GetLocalTime
InitializeCriticalSection
GetCurrentProcessId
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
VirtualQuery
VirtualProtect
rpcrt4
NdrClientCall
RpcBindingSetAuthInfoW
RpcMgmtEpEltInqDone
ole32
CoDeactivateObject
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ