Static task
static1
Behavioral task
behavioral1
Sample
f185f2a21c4d39730944074f655ca7fd859194586b550ea58677544b410bb6ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f185f2a21c4d39730944074f655ca7fd859194586b550ea58677544b410bb6ba.exe
Resource
win10v2004-20220901-en
General
-
Target
f185f2a21c4d39730944074f655ca7fd859194586b550ea58677544b410bb6ba
-
Size
104KB
-
MD5
06c6d6ed1ef4cbb12bb373e78fa59b3e
-
SHA1
7aa405f340aec9ba91ab341d4304ed083f984bda
-
SHA256
f185f2a21c4d39730944074f655ca7fd859194586b550ea58677544b410bb6ba
-
SHA512
138860b05c2d3c983867ae5c0c92a257261ff83243a4df650d06c33579faf0dfe402af8aa1bf5c837c922c2b71adf19232d7c9fd69c81ad166d566d959a7d849
-
SSDEEP
3072:98xJkTzAtueMNBi4SUNQ5EN04hgGH9ebA2QD9CH:wJkP3nNBi4HQ5Ei+gm3D9CH
Malware Config
Signatures
Files
-
f185f2a21c4d39730944074f655ca7fd859194586b550ea58677544b410bb6ba.exe windows x86
db13d1322c41e32fda1164dca71058d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
FindVolumeClose
GetThreadSelectorEntry
GetVersionExA
ResetEvent
GlobalGetAtomNameA
SetFileApisToANSI
GetLastError
RemoveDirectoryA
GetNumberOfConsoleFonts
EnumSystemCodePagesA
ExitProcess
GetStartupInfoA
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack329 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA