Static task
static1
Behavioral task
behavioral1
Sample
a70f35c09c5049037ca839dbae98df871086e1e565493b72b574abb9fb0f7290.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a70f35c09c5049037ca839dbae98df871086e1e565493b72b574abb9fb0f7290.exe
Resource
win10v2004-20220812-en
General
-
Target
a70f35c09c5049037ca839dbae98df871086e1e565493b72b574abb9fb0f7290
-
Size
35KB
-
MD5
fa0d8ee41b2062db2851bb5dda36940b
-
SHA1
74632b17505aaf7d93b968138d5511a2d6557487
-
SHA256
a70f35c09c5049037ca839dbae98df871086e1e565493b72b574abb9fb0f7290
-
SHA512
e01d5aa0af749dc1e6f406f5b4cfca07a3a8585a78f907b1e29fbf11040d20de3f699ea997e39349f50090028beeebd95907c091c0975f30d7ca7137f2032426
-
SSDEEP
384:fSG0lSZq5zh8y+HKf6yfxTC9oQO9we9lCzE3Oa13RfK9G1ba/STnifKF9LGpt/w/:Pj8VMqyyZCAXdZ1bgSoys/wpVcrswe
Malware Config
Signatures
Files
-
a70f35c09c5049037ca839dbae98df871086e1e565493b72b574abb9fb0f7290.exe windows x86
e1cfdeba01b7fb76d36141a1a9c5460b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtAddAtom
atl
AtlMarshalPtrInProc
kernel32
QueryPerformanceCounter
GetTickCount
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
LoadLibraryW
SetLastError
GetProcAddress
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
VirtualAlloc
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ