Static task
static1
Behavioral task
behavioral1
Sample
f850855e1cc4ee6f7660f956cde94b1e0d131d8971033476c5e687bd2ad22584.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f850855e1cc4ee6f7660f956cde94b1e0d131d8971033476c5e687bd2ad22584.exe
Resource
win10v2004-20221111-en
General
-
Target
f850855e1cc4ee6f7660f956cde94b1e0d131d8971033476c5e687bd2ad22584
-
Size
232KB
-
MD5
933fef130dc9e71f160c883b0667a7a0
-
SHA1
bb01a574d2d15a44b92eed1de56d46ea5965a103
-
SHA256
f850855e1cc4ee6f7660f956cde94b1e0d131d8971033476c5e687bd2ad22584
-
SHA512
6343b774290df9fad69ad9918f0808a9dedb553cae5c35a3ce1745b68b4a39c2f4b7c211f60f7aba4f07316b2abee697d66bea61c6bb5e3e2aff43140b27ca9f
-
SSDEEP
6144:mezSQlAtntVNywYYdoqcVpnSm12La0suinQcFDEW/:vintVVYeFspSm18aluCQcq
Malware Config
Signatures
Files
-
f850855e1cc4ee6f7660f956cde94b1e0d131d8971033476c5e687bd2ad22584.exe windows x86
cfa709e7e058b1257e49fb83a19b74a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrlenA
GetCommandLineA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
DeleteFileW
FindFirstFileW
SetUnhandledExceptionFilter
VirtualFree
CreateFileW
LockResource
TlsFree
GetLocaleInfoA
GetConsoleMode
SetStdHandle
EnterCriticalSection
RaiseException
GetStartupInfoA
GetOEMCP
GetModuleHandleA
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_exit
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ