Static task
static1
Behavioral task
behavioral1
Sample
f94618134e083cc3fd8a96fadb73fe3a72de75855601a27ee6b38f25fc516c50.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f94618134e083cc3fd8a96fadb73fe3a72de75855601a27ee6b38f25fc516c50.exe
Resource
win10v2004-20220812-en
General
-
Target
f94618134e083cc3fd8a96fadb73fe3a72de75855601a27ee6b38f25fc516c50
-
Size
19KB
-
MD5
61befb46d49c840965242ff1331081fe
-
SHA1
0bed363b1ce7749ab7b35f3e8bd08a6ec3e3c4b4
-
SHA256
f94618134e083cc3fd8a96fadb73fe3a72de75855601a27ee6b38f25fc516c50
-
SHA512
2558a3df9c81bcf2dcc0f34ed6b77af1640c214e10096e847675985380ee741c7851c74195e5c272eee60db68d51f3a37cc912dbe4f133eadaf0b8d72613a568
-
SSDEEP
192:nwjVt09sGyjedC7S2weCtUf2BLaP1oynMlgEle+NMx+we9dblcIUANH88KNkX:nZ9AeeYLk1qK+NMEZdble+Ke
Malware Config
Signatures
Files
-
f94618134e083cc3fd8a96fadb73fe3a72de75855601a27ee6b38f25fc516c50.exe windows x86
bbd25d71eccefd91099134d99fde4b13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetLastError
LocalAlloc
CreateMutexA
OpenMutexA
GetStartupInfoA
msvcrt
_XcptFilter
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ