Static task
static1
Behavioral task
behavioral1
Sample
91ffd20d450b0428dd50a17cf5c5ee47e446fb98790e2d708d176ff931a2c4fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91ffd20d450b0428dd50a17cf5c5ee47e446fb98790e2d708d176ff931a2c4fe.exe
Resource
win10v2004-20220901-en
General
-
Target
91ffd20d450b0428dd50a17cf5c5ee47e446fb98790e2d708d176ff931a2c4fe
-
Size
284KB
-
MD5
56f4d209110dfae4e44b2e8e95694d3e
-
SHA1
2ac7e212abcfe0460cc8e6c934d74a532c702253
-
SHA256
91ffd20d450b0428dd50a17cf5c5ee47e446fb98790e2d708d176ff931a2c4fe
-
SHA512
b1f0a88a12ec4e2cd3a98de571bef49a2d3072f756fe290956e6f8d5da4e930b47fa413b9f8788da9eeea31f76b8b749c633cedc2278c806cce7567e885922a9
-
SSDEEP
6144:fHVNrYfIZOLNk6OIP1hMn05olhliznF0qpan:9NrWIZ6XOIP1hM4oDUznF0E2
Malware Config
Signatures
Files
-
91ffd20d450b0428dd50a17cf5c5ee47e446fb98790e2d708d176ff931a2c4fe.exe windows x86
62c39493e6e4571411242a63635bec8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
lstrlenW
QueryPerformanceCounter
OutputDebugStringA
FindFirstFileW
CloseHandle
HeapAlloc
TlsGetValue
CreateEventA
GetCurrentProcessId
WaitForSingleObject
LoadResource
GetModuleHandleA
GetStringTypeA
LCMapStringW
TerminateProcess
LocalFree
GetACP
ExitProcess
GetProcessHeap
GetCommandLineA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ