Static task
static1
Behavioral task
behavioral1
Sample
a31c9a4e4904a1751b9c8924e09636c0841288630a2272fe4a0747afa4b61e25.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a31c9a4e4904a1751b9c8924e09636c0841288630a2272fe4a0747afa4b61e25.exe
Resource
win10v2004-20221111-en
General
-
Target
a31c9a4e4904a1751b9c8924e09636c0841288630a2272fe4a0747afa4b61e25
-
Size
109KB
-
MD5
35b5739adb5b7e3c18fe0b2a266ace58
-
SHA1
672df61b9c2e12033363c637e7e4455eafcdfb45
-
SHA256
a31c9a4e4904a1751b9c8924e09636c0841288630a2272fe4a0747afa4b61e25
-
SHA512
03655dedc08c2879d9aac42378af3b1984d4ec808134102efe93a7bfe6d2107369e3adfb5b4f68c24804c5cf099a0888a9f3357e4c8b0b6fabb2fb6cec575a3b
-
SSDEEP
3072:ROjS2D3qLgAHNtavDx3zz+RbszklVlj+9:R2YZNO9jOb/rljE
Malware Config
Signatures
Files
-
a31c9a4e4904a1751b9c8924e09636c0841288630a2272fe4a0747afa4b61e25.exe windows x86
6190ec7df209886cd8a1451137ee9005
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
InterlockedCompareExchange
DeleteFileA
GetSystemTime
CopyFileA
SetThreadLocale
GetVersionExA
MulDiv
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcessId
GetTempPathA
GetThreadLocale
QueryPerformanceCounter
GetSystemDirectoryW
GetConsoleOutputCP
CompareStringW
SizeofResource
RtlMoveMemory
VirtualProtect
FreeEnvironmentStringsA
GetProcAddress
LoadResource
SetFileTime
GetEnvironmentVariableA
GetModuleHandleA
GetACP
SetLastError
msvcrt
__getmainargs
__p__commode
_exit
_XcptFilter
__p___initenv
_adjust_fdiv
_initterm
_controlfp
__set_app_type
__p__fmode
_except_handler3
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Iec Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ