Static task
static1
Behavioral task
behavioral1
Sample
f201fc921d9d624144980f364cba5bfbcc91da387ee0bac5f31a5de4971b18b1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f201fc921d9d624144980f364cba5bfbcc91da387ee0bac5f31a5de4971b18b1.exe
Resource
win10v2004-20221111-en
General
-
Target
f201fc921d9d624144980f364cba5bfbcc91da387ee0bac5f31a5de4971b18b1
-
Size
193KB
-
MD5
ecb81cc3016f15992ad04ff54a221c00
-
SHA1
c04f917fe4c8741627f114e8e259a217ac760b36
-
SHA256
f201fc921d9d624144980f364cba5bfbcc91da387ee0bac5f31a5de4971b18b1
-
SHA512
e737170f84e58092d71876664f3f0e558662b0255475133464adb58dcf0c83552cb9975415a469a70a25cb020bff58817bc4f85464afa2ade47a82d32b5e77c3
-
SSDEEP
3072:yH7I+PPuA19wFGnBF9z0r7eU35bgFZly7UIxWk0+s:scS3SGnv9zE7zBUvnIx0
Malware Config
Signatures
Files
-
f201fc921d9d624144980f364cba5bfbcc91da387ee0bac5f31a5de4971b18b1.exe windows x86
83b2c4c9c40b649b299ebc358ef4310a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VirtualAlloc
CreateFileA
GetProcessHeap
user32
GetSystemMetrics
GetSysColor
gdi32
GetStockObject
msvcrt
_adjust_fdiv
__p__commode
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
__set_app_type
_c_exit
_controlfp
advapi32
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data5 Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rr Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.text14 Size: 1024B - Virtual size: 550B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ