Static task
static1
Behavioral task
behavioral1
Sample
df84daa5c5cfd2d14653b6302ed2bbea9632b9dca9834f9bc773a1b79eff66c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df84daa5c5cfd2d14653b6302ed2bbea9632b9dca9834f9bc773a1b79eff66c4.exe
Resource
win10v2004-20220812-en
General
-
Target
df84daa5c5cfd2d14653b6302ed2bbea9632b9dca9834f9bc773a1b79eff66c4
-
Size
7KB
-
MD5
3abbdd68434c92503644390b109e806f
-
SHA1
160705809d8b3a07f6144319354372128ea4e6c4
-
SHA256
df84daa5c5cfd2d14653b6302ed2bbea9632b9dca9834f9bc773a1b79eff66c4
-
SHA512
1ff5878ce00b739b3405649a5c12cb9c418b37055d4e48e361f7e1391de282a360515cf9d99a31b6d448a0b64480bb94ffb18ceac8111dc31f2c8120450b037e
-
SSDEEP
96:j0yy3K7PhdVecBl0VB5IkcwUPOJ1BFeL/9HLt5IhGtNR:oyMMVJM5Ikb1uL/9HLt5Ew
Malware Config
Signatures
Files
-
df84daa5c5cfd2d14653b6302ed2bbea9632b9dca9834f9bc773a1b79eff66c4.exe windows x86
0babfe53edf10ea2e8e45bc8f9d59fc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strlen
kernel32
GetModuleHandleA
HeapCreate
GetCurrentThreadId
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
DeleteFileA
HeapReAlloc
HeapAlloc
user32
GetInputState
PostThreadMessageA
GetMessageA
CharLowerA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.code Size: 1024B - Virtual size: 600B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ