Static task
static1
Behavioral task
behavioral1
Sample
c488568e619e4097d52aeece6486438e18cf9513cb38e8adf92883e9d83e9c90.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c488568e619e4097d52aeece6486438e18cf9513cb38e8adf92883e9d83e9c90.exe
Resource
win10v2004-20220812-en
General
-
Target
c488568e619e4097d52aeece6486438e18cf9513cb38e8adf92883e9d83e9c90
-
Size
312KB
-
MD5
5d472fd4bcb209268ac5b854aa515522
-
SHA1
d1fa272a6774cd707fb6c40feea5834c653e7e52
-
SHA256
c488568e619e4097d52aeece6486438e18cf9513cb38e8adf92883e9d83e9c90
-
SHA512
2c6b34299c9d810388b517c283fb7bf1ba3c99eba9a83acf4a3094291915f4d3610f64af4194f19858a413a4d1984256479608b3c34ea18152c49dc3a94744dd
-
SSDEEP
6144:eG2w4JZR2hc7SV3nhZBbkjVd4D/Xczeu/t:eGTkZRRWxnhZVkZy5
Malware Config
Signatures
Files
-
c488568e619e4097d52aeece6486438e18cf9513cb38e8adf92883e9d83e9c90.exe windows x86
623a7f932ebb2742bfc852452f09833c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
VirtualAlloc
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
CreateFileA
SetEvent
GetProcAddress
GetSystemDirectoryA
Sleep
HeapFree
HeapAlloc
HeapReAlloc
GetFileType
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
user32
DestroyWindow
FindWindowA
ole32
CoUninitialize
netapi32
NetDfsRemoveStdRoot
avifil32
AVISaveOptionsFree
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ