Static task
static1
Behavioral task
behavioral1
Sample
af98668ef2a5ca6befc849635869f94e011922af67f28c370e5fa9633bc15633.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af98668ef2a5ca6befc849635869f94e011922af67f28c370e5fa9633bc15633.exe
Resource
win10v2004-20220812-en
General
-
Target
af98668ef2a5ca6befc849635869f94e011922af67f28c370e5fa9633bc15633
-
Size
137KB
-
MD5
075d8536e0afcbd50ed56c108cafafd8
-
SHA1
156ac8a147de432873c2c8630c5607c226a5c676
-
SHA256
af98668ef2a5ca6befc849635869f94e011922af67f28c370e5fa9633bc15633
-
SHA512
9bd70f14c2adeb01e78aa4e669aeccfbfc9f144c8ac50fb86357b77badbe4a56c4e112fdd062023ea9529d946d7ee18da490ac14733de70869b8bacbf15b6cbc
-
SSDEEP
1536:dw2vyRKMqefFghufQmn1AoYSCe20/IE/U86VW3pXzvbJiekeKAS8JS8mOr2Y/QEL:dnoNF9ghufjK7qrdoje68sof8bzI
Malware Config
Signatures
Files
-
af98668ef2a5ca6befc849635869f94e011922af67f28c370e5fa9633bc15633.exe windows x86
34b288f5c3a887cbda58cbe83dcb425a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
memmove
memcpy
??2@YAPAXI@Z
__set_app_type
??3@YAXPAX@Z
user32
LoadMenuA
kernel32
WaitForSingleObject
VirtualFree
LoadLibraryA
GetProcAddress
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
CreateThread
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ