Static task
static1
Behavioral task
behavioral1
Sample
f6f05014df99a54501fb759eb64e657e7df86081173881445af3cb62d3f9d543.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6f05014df99a54501fb759eb64e657e7df86081173881445af3cb62d3f9d543.exe
Resource
win10v2004-20221111-en
General
-
Target
f6f05014df99a54501fb759eb64e657e7df86081173881445af3cb62d3f9d543
-
Size
456KB
-
MD5
916aa4f5a5f580731994f612367f6be2
-
SHA1
d42bf00b0864ca8c90ff807c23a5a5cdf52f0060
-
SHA256
f6f05014df99a54501fb759eb64e657e7df86081173881445af3cb62d3f9d543
-
SHA512
393135faa7a656fdbac5cdf934998cd4737488ee9fa3e540152aefdae899e2c9318b59b19a78aa9fa8493d257d1c2eb7bea2d39af4e27928a7c2d8fa6b2f1d05
-
SSDEEP
12288:LJWYM2h6ZDNhnj7g+56y8dkczhu95mmsVC0B8jrrXNvB:LJNhMDNhnfcHkczh9msE0WXxZ
Malware Config
Signatures
Files
-
f6f05014df99a54501fb759eb64e657e7df86081173881445af3cb62d3f9d543.exe windows x86
c53b9043892e2d26a2bcd118f6934f03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
WaitForSingleObject
CloseHandle
CreateProcessA
OpenProcess
GetCurrentProcessId
CreateFileA
CopyFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
user32
wsprintfA
msvcrt
_stricmp
free
atoi
memset
sscanf
strcpy
strcat
strlen
memcpy
malloc
sprintf
realloc
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 440KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ