Static task
static1
Behavioral task
behavioral1
Sample
df352cd80b03f1286860d064694870b2b33f67cf95e4a76d4049c97e5321d0e6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df352cd80b03f1286860d064694870b2b33f67cf95e4a76d4049c97e5321d0e6.exe
Resource
win10v2004-20221111-en
General
-
Target
df352cd80b03f1286860d064694870b2b33f67cf95e4a76d4049c97e5321d0e6
-
Size
253KB
-
MD5
50694e7b16a84bbef94299eab1c03a35
-
SHA1
4ea974d02c4564b705d54a8ac7ebabeda542d70f
-
SHA256
df352cd80b03f1286860d064694870b2b33f67cf95e4a76d4049c97e5321d0e6
-
SHA512
461fc5e009c7a1559b69827eec3aaf51c0dadba801208a24d12a154d3e660c30c88eb3eadf6a6365947fc9f4deefe4d4ea4452651a4cbe2771ee909eb043491c
-
SSDEEP
6144:p3Oip/Yr4upi95jTuS/TBSkomd0+lHVOq4rbgCJh:JEgDSko5MVs
Malware Config
Signatures
Files
-
df352cd80b03f1286860d064694870b2b33f67cf95e4a76d4049c97e5321d0e6.exe windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 118KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE