Static task
static1
Behavioral task
behavioral1
Sample
438799020eb7fc4dd81bec103d12bc4c3fafba119bbda7c050f7af191c9b69ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
438799020eb7fc4dd81bec103d12bc4c3fafba119bbda7c050f7af191c9b69ec.exe
Resource
win10v2004-20220812-en
General
-
Target
438799020eb7fc4dd81bec103d12bc4c3fafba119bbda7c050f7af191c9b69ec
-
Size
200KB
-
MD5
556eae7dfb1ace68827ee570756ac436
-
SHA1
938eb2a579f2b6276858fa099572fbc1144b1af8
-
SHA256
438799020eb7fc4dd81bec103d12bc4c3fafba119bbda7c050f7af191c9b69ec
-
SHA512
36f2bc9a0c74627da2f42634912fe0de0fa6fc8e6e0e873f8d8ff03183cd5ad5532a858e63c8dfebe1728eadef9d89124272a08b18ad53aba19f72a76fe2dd8f
-
SSDEEP
6144:4heeEc3vmUx1r+KHbgGoBoXcy0zl+8sh:5lcfZr+KHbloq70JH8
Malware Config
Signatures
Files
-
438799020eb7fc4dd81bec103d12bc4c3fafba119bbda7c050f7af191c9b69ec.exe windows x86
f9b8ee55922e4aa42f53b34920590bd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetCommandLineW
GetCommandLineA
GetProcessHeap
LoadLibraryExA
GetOEMCP
GetVersionExA
ExitProcess
GetLocalTime
GetACP
LoadResource
LockResource
GetLastError
GetVersion
VirtualAlloc
GetLocaleInfoA
GetThreadLocale
GetSystemDefaultLangID
GetProcAddress
GetModuleFileNameA
GetStringTypeA
lstrlenW
GetTickCount
HeapAlloc
IsBadReadPtr
GlobalAddAtomA
LoadLibraryA
GlobalAlloc
GetUserDefaultLCID
GetModuleHandleA
RaiseException
ExitThread
GlobalFindAtomA
InitializeCriticalSection
GetStdHandle
VirtualAllocEx
GlobalDeleteAtom
HeapFree
GetStartupInfoA
Sections
CODE Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 99B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ