Static task
static1
Behavioral task
behavioral1
Sample
afa46641880340afa6a3cd2771a2d88472c719317b6f45aa1cdcdaa47eef1481.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
afa46641880340afa6a3cd2771a2d88472c719317b6f45aa1cdcdaa47eef1481.exe
Resource
win10v2004-20220812-en
General
-
Target
afa46641880340afa6a3cd2771a2d88472c719317b6f45aa1cdcdaa47eef1481
-
Size
94KB
-
MD5
42e6da1b6c35fb561f4da3206711390d
-
SHA1
bf1da9055e7f950b8820b997cc5f5e649fe0a236
-
SHA256
afa46641880340afa6a3cd2771a2d88472c719317b6f45aa1cdcdaa47eef1481
-
SHA512
99e339d9e0d296b1b383e269615365fe7dd1e663801fb74d166d94a131c38d34ab83c2d85987d73d6957bf7ac9c209a201c72f2e2477513de10d68c51888734b
-
SSDEEP
1536:4lJ4xP7Yupi6h/QyeMHKrJshqtZzuzCLWIK5SgMc8YaEJwZK4/83ZoMOALF6SSf:3l75pnheLOqXizy45TMhZEXtpxLF6H
Malware Config
Signatures
Files
-
afa46641880340afa6a3cd2771a2d88472c719317b6f45aa1cdcdaa47eef1481.exe windows x86
b18be88ab4f269ad28c8cbbb29398d53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidUILanguage
GetTimeFormatW
LZOpenFileW
DeleteFiber
VirtualProtect
GetExpandedNameA
FreeConsole
ReleaseActCtx
CheckNameLegalDOS8Dot3A
CreateFileW
GetWriteWatch
VirtualProtect
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE