Static task
static1
Behavioral task
behavioral1
Sample
a204e8c6ef0d5a42823a25e6a300a1b8414852c8c829523bf19290c957baa673.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a204e8c6ef0d5a42823a25e6a300a1b8414852c8c829523bf19290c957baa673.exe
Resource
win10v2004-20221111-en
General
-
Target
a204e8c6ef0d5a42823a25e6a300a1b8414852c8c829523bf19290c957baa673
-
Size
148KB
-
MD5
fac9f717782056d3520bf464a426ea98
-
SHA1
066d034a916bd5a2bc1792494b41b1c901b55abf
-
SHA256
a204e8c6ef0d5a42823a25e6a300a1b8414852c8c829523bf19290c957baa673
-
SHA512
9edf26b16f7307860d29bccf9ac6435683a273af8efe5cf0d8576ced47bf22e6f68307a4d2d00361e1c51e06b319fab94cbeaf4f06e36ca6d730c798dd5268ee
-
SSDEEP
3072:1f979wx5GMKbG4nJXNYwZdH7uDFliCeZvEis0yZ:/79wonJNbbuZEhZZpyZ
Malware Config
Signatures
Files
-
a204e8c6ef0d5a42823a25e6a300a1b8414852c8c829523bf19290c957baa673.exe windows x86
a08c96d490fb2e17004449ce44827be8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_fstat
_strdup
_spawnv
tmpfile
_execlpe
__getmainargs
__setusermatherr
_wutime64
_safe_fdivr
_ismbclower
tan
_wmkdir
_acmdln
_XcptFilter
memcpy
rename
_heapwalk
_initterm
_mbsstr
__set_app_type
_get_sbh_threshold
_wcsicmp
_controlfp
iswcntrl
_adjust_fdiv
_mbsnbcpy
_mbsdec
_lsearch
_safe_fdiv
__p__commode
exit
__p__fmode
_mbsspnp
_stat
_exit
_except_handler3
kernel32
WriteConsoleW
GetEnvironmentStringsW
EnterCriticalSection
ExitThread
GetACP
GetNumberFormatA
GetModuleHandleA
GetVersion
ReadFile
ResetEvent
TlsGetValue
CreateToolhelp32Snapshot
TerminateThread
GetStartupInfoA
LCMapStringW
GetThreadContext
FreeEnvironmentStringsA
MultiByteToWideChar
FindFirstFileA
GetModuleFileNameA
LoadLibraryA
lstrlenA
lstrcpyA
CloseHandle
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ