Static task
static1
Behavioral task
behavioral1
Sample
2443f3b111d488485e9ccec438fbae104b229694967b5bfdec0ea774de91b0a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2443f3b111d488485e9ccec438fbae104b229694967b5bfdec0ea774de91b0a8.exe
Resource
win10v2004-20221111-en
General
-
Target
2443f3b111d488485e9ccec438fbae104b229694967b5bfdec0ea774de91b0a8
-
Size
1.1MB
-
MD5
3c9cca02bc7e4b6b67039c50ac256a31
-
SHA1
f8a04329a284ebdf4054f406b68a17796e490577
-
SHA256
2443f3b111d488485e9ccec438fbae104b229694967b5bfdec0ea774de91b0a8
-
SHA512
371dd45bd2dff57f293f950ec6e9fecc8e490908c6c98ad7b6b2290a7e1b8027a29d9714245f7d9f239e97fabd7bf01e9a0597d70b7ebe5e87f934e38a7f507b
-
SSDEEP
24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4b:qlbM2ZmVZPbILUYFYFyCJJzb
Malware Config
Signatures
Files
-
2443f3b111d488485e9ccec438fbae104b229694967b5bfdec0ea774de91b0a8.exe windows x86
998383a0d3eee350ddb8b84d1cee40d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 813KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ