Static task
static1
Behavioral task
behavioral1
Sample
f2219d495d98b4c3e12ee4ff66268cb50f64f76ab74b80ba6c61d6b56dda30f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2219d495d98b4c3e12ee4ff66268cb50f64f76ab74b80ba6c61d6b56dda30f2.exe
Resource
win10v2004-20220901-en
General
-
Target
f2219d495d98b4c3e12ee4ff66268cb50f64f76ab74b80ba6c61d6b56dda30f2
-
Size
304KB
-
MD5
ed2dafde71828c3c8a45cb38e79f1e24
-
SHA1
cda57163f049ddecfa84516016e3787d72401868
-
SHA256
f2219d495d98b4c3e12ee4ff66268cb50f64f76ab74b80ba6c61d6b56dda30f2
-
SHA512
dbaf49b53ef285c2cb3fe8e48ae99811aa22ff8eaf59ecc8c13766ceab8116486351e1b7c565d01f9b9bc1ace3885f72be61b89865c08a2069efb5a38d64a606
-
SSDEEP
6144:HaI00QAML0/DAGFIYFVOhNntxSp3URRUbVcrAXLe+:g0gYbAGFImg/txSp3U8xOw
Malware Config
Signatures
Files
-
f2219d495d98b4c3e12ee4ff66268cb50f64f76ab74b80ba6c61d6b56dda30f2.exe windows x86
8a0f4de851af90f6b2e95a7f2b7cf979
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
SetFilePointer
WriteConsoleW
GetVersion
CreateFileMappingW
DeleteFileA
GetShortPathNameW
Heap32Next
SetEnvironmentVariableA
SetCurrentDirectoryA
GetModuleHandleW
GetStringTypeW
GetConsoleTitleA
GetModuleHandleA
GetStringTypeW
GetProcessHeap
GetProcessHeap
GetACP
HeapCreate
DeleteFileA
DeleteFileA
GetExitCodeProcess
GetLastError
mstscax
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetTscCtlVer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ