Static task
static1
Behavioral task
behavioral1
Sample
f0ef59db9c54d5839bce50ba1338b1ee34fc97c592aff744e1d8b2a69b227f2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f0ef59db9c54d5839bce50ba1338b1ee34fc97c592aff744e1d8b2a69b227f2b.exe
Resource
win10v2004-20221111-en
General
-
Target
f0ef59db9c54d5839bce50ba1338b1ee34fc97c592aff744e1d8b2a69b227f2b
-
Size
35KB
-
MD5
94718f950d277f8a569f423ae5ba4d6b
-
SHA1
869b24a545fa5264318fb25a92662acbe323607d
-
SHA256
f0ef59db9c54d5839bce50ba1338b1ee34fc97c592aff744e1d8b2a69b227f2b
-
SHA512
022650a9ea29f152bafe6a8693dab5dfd76616189a0b758418189f7676a1a4cc6d5734e67d74bd57f61be433ef0d52ef47beab1bacd3feb346767696dc6379b0
-
SSDEEP
384:DqYVOnZEYDhKoO4hypSnf31AmbJdbDvrEdUb3bI0zOw97ldomFEIwlg:xYsoO4hypSf31AmDvAUEw97lKmnwlg
Malware Config
Signatures
Files
-
f0ef59db9c54d5839bce50ba1338b1ee34fc97c592aff744e1d8b2a69b227f2b.exe windows x86
c472f8eef5ee522c4795dee348bce5a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
SetUnhandledExceptionFilter
lstrlenW
EnumDateFormatsW
GetModuleHandleA
SetProcessWorkingSetSize
user32
MessageBoxA
gdi32
FlattenPath
psapi
QueryWorkingSet
Sections
1 Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Y Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
A Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
A Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
6Pc Size: 130KB - Virtual size: 128KB
IMAGE_SCN_MEM_READ
Ois Size: 320KB - Virtual size: 320KB
IMAGE_SCN_MEM_READ