Static task
static1
Behavioral task
behavioral1
Sample
391b054509ef559568849eeb91aaeda14e25cf6afb861c112376a166eb6ff91a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
391b054509ef559568849eeb91aaeda14e25cf6afb861c112376a166eb6ff91a.exe
Resource
win10v2004-20221111-en
General
-
Target
391b054509ef559568849eeb91aaeda14e25cf6afb861c112376a166eb6ff91a
-
Size
109KB
-
MD5
f583e1a04eac7221d96096d5160877fd
-
SHA1
27406d97cc956cb6a9f8c43abce3aab2bcc9ef91
-
SHA256
391b054509ef559568849eeb91aaeda14e25cf6afb861c112376a166eb6ff91a
-
SHA512
eb3cd6835986943cc88d07daad6ce0cf4538eaab5bc0ac8ef68a3158e43ae48c1ac0cc1d961056b32cb929d6049a6f590262b56a4a4d9895a3ccb14e9196ce2d
-
SSDEEP
1536:KXdL1GKYGJjfhrXZPLPXXTB68DLnKp5wILGjXpToel4r2x2sg/1/XIc:KNREGLXhPzQ8DLnK3LGjRX2b/1/F
Malware Config
Signatures
Files
-
391b054509ef559568849eeb91aaeda14e25cf6afb861c112376a166eb6ff91a.exe windows x86
3c791dd3f9f8016b0ad9e7635bbf248b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
DeleteFileA
Sleep
SizeofResource
GetLocaleInfoW
GetLocalTime
GetConsoleOutputCP
GetSystemTimeAsFileTime
SetLastError
lstrcmpA
GetThreadLocale
lstrcatA
lstrcmpiA
GlobalHandle
lstrcmpiW
VirtualProtect
GetCurrentThread
GetExitCodeProcess
lstrcpyA
GetProcAddress
MulDiv
GetLastError
GetEnvironmentStringsW
GetUserDefaultLCID
LoadResource
GetModuleHandleA
RtlMoveMemory
VirtualQuery
GetTempPathA
SetErrorMode
GetTempFileNameA
WideCharToMultiByte
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
msvcrt
_initterm
_adjust_fdiv
__p___initenv
tan
_controlfp
__getmainargs
_XcptFilter
__p__fmode
__set_app_type
_except_handler3
__p__commode
_exit
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Itisox Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ