Static task
static1
Behavioral task
behavioral1
Sample
f366aaf80869ab3690c7abd0e602a77bd6a6c06b0e611819a1ed945496852ba0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f366aaf80869ab3690c7abd0e602a77bd6a6c06b0e611819a1ed945496852ba0.exe
Resource
win10v2004-20220812-en
General
-
Target
f366aaf80869ab3690c7abd0e602a77bd6a6c06b0e611819a1ed945496852ba0
-
Size
124KB
-
MD5
e4bad461ccfeacde2653adf26ca37b2c
-
SHA1
67e9f0b40e3e85e4587e650586ca1c8eea42e4a8
-
SHA256
f366aaf80869ab3690c7abd0e602a77bd6a6c06b0e611819a1ed945496852ba0
-
SHA512
209beceb498eddfc924919a3bd4d954b14a7aa2e88ed4f0353413d7b854b85b5993b593adc8f86f895eab4c65e2f4899935238c38c90adaee0ecf15600ec83df
-
SSDEEP
3072:IJl7LcLPadnO686B6jj5FZ6ik61Vd2ZXmYXbtjGTg2bG:8l7Lc62h+61POPXhSc2
Malware Config
Signatures
Files
-
f366aaf80869ab3690c7abd0e602a77bd6a6c06b0e611819a1ed945496852ba0.exe windows x86
4f0a0e87130d7dcefd52524b2c5ba4e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
SetLocalTime
InterlockedExchangeAdd
IsDBCSLeadByteEx
ConvertDefaultLocale
BeginUpdateResourceA
OpenMutexW
SetFileApisToOEM
GetVersion
ReadConsoleOutputA
GetCurrentProcess
EscapeCommFunction
CreateWaitableTimerA
EraseTape
GlobalFindAtomA
GetThreadLocale
GetComputerNameW
GetConsoleCursorInfo
SetThreadContext
GetProcessShutdownParameters
LocalAlloc
VirtualProtect
rpcrt4
UuidCreateNil
msvcrt
_except_handler3
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tecx Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stls Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ