Static task
static1
Behavioral task
behavioral1
Sample
f112a832b5c13f3d0af46269cf4e91fcf62e35d77cff93968923a7ef49a9ea84.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f112a832b5c13f3d0af46269cf4e91fcf62e35d77cff93968923a7ef49a9ea84.exe
Resource
win10v2004-20220812-en
General
-
Target
f112a832b5c13f3d0af46269cf4e91fcf62e35d77cff93968923a7ef49a9ea84
-
Size
330KB
-
MD5
eaa9155e7cad705a81bb13fb438327a7
-
SHA1
883a5bd7dd4b7e609c7d28f64b52c094f9940b15
-
SHA256
f112a832b5c13f3d0af46269cf4e91fcf62e35d77cff93968923a7ef49a9ea84
-
SHA512
e1959bdf26a78d6f033b3832be8e9c17dc8efd08bfe2a87fc512abc04a20627c1345063d769058db1149b283153b8c3f4d6d7672ceff97e1f0e12c6073be64dd
-
SSDEEP
6144:QWv83KMwt+59MzSRCoL73kqnj1G75TTVQ5XXn44Pr065f:3v83KMwE9M2pLLPnj1GNpuXXnztf
Malware Config
Signatures
Files
-
f112a832b5c13f3d0af46269cf4e91fcf62e35d77cff93968923a7ef49a9ea84.exe windows x86
7b1e642a2450f3908d146a9df017bf4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetSystemInfo
VirtualAlloc
user32
LoadCursorA
LoadIconA
RegisterClassExA
advapi32
RegOpenKeyA
msvcrt
_XcptFilter
__getmainargs
__lconv_init
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_mbsinc
_mbslen
_mbsrchr
_stricmp
_strnicmp
exit
setlocale
strchr
strncpy
strtoul
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ