Static task
static1
Behavioral task
behavioral1
Sample
b175d7f3a90741372fb59c23be887cd833b4b3570e08a214ff5eceda26b5418c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b175d7f3a90741372fb59c23be887cd833b4b3570e08a214ff5eceda26b5418c.exe
Resource
win10v2004-20220812-en
General
-
Target
b175d7f3a90741372fb59c23be887cd833b4b3570e08a214ff5eceda26b5418c
-
Size
143KB
-
MD5
5d76c07ea3e1af6c1a428a31396de57d
-
SHA1
7bbb1dc610e12f04a116e2ac71e088114564ff42
-
SHA256
b175d7f3a90741372fb59c23be887cd833b4b3570e08a214ff5eceda26b5418c
-
SHA512
19506d19e48cc5ecc633b59388c34eedd3f014f7250921612ea0e45c27a3b15c41c24910bb2f7bccc5ee3bc17caabc4ce023b99484e0df56a22d2b4b5e5ce614
-
SSDEEP
1536:uQHhU7YszOCfOONpQEVM0xv737FxnnC3XuQs5tbfme6rbTRo8VDcN:uQHOzdfTpQEVxXvC3XrstbmeyTRoxN
Malware Config
Signatures
Files
-
b175d7f3a90741372fb59c23be887cd833b4b3570e08a214ff5eceda26b5418c.exe windows x86
2da2649a7db8136ecaae9d8b60997ab5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
InterlockedExchange
GetModuleHandleA
IsBadStringPtrA
GetStartupInfoA
GetLocaleInfoA
lstrcpynA
ResetEvent
GlobalUnlock
DeleteFileA
HeapAlloc
SetLastError
OpenEventA
GetOEMCP
GetCommandLineA
LoadLibraryW
msvcrt
_adj_fprem1
__p__fmode
perror
__p__commode
exit
_mbsset
wcstoul
_adjust_fdiv
__setusermatherr
_heapused
_mbscat
memcpy
_initterm
_XcptFilter
_exit
_acmdln
setvbuf
_except_handler3
_controlfp
_wsopen
_mbsnbcoll
_inpw
__set_app_type
wcsrchr
__getmainargs
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 85B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ