Static task
static1
Behavioral task
behavioral1
Sample
f42917dff4ad9573cc154d6bdabd69c428f706a6d9dd12825c6f522242503f58.exe
Resource
win7-20221111-en
General
-
Target
f42917dff4ad9573cc154d6bdabd69c428f706a6d9dd12825c6f522242503f58
-
Size
384KB
-
MD5
8fe5cb358203469ffcf5ac8a9dcacb8e
-
SHA1
4185c924bf1d61367ef30de5ada726ed0aebd6e2
-
SHA256
f42917dff4ad9573cc154d6bdabd69c428f706a6d9dd12825c6f522242503f58
-
SHA512
7e7d07b8e1ef205c59f81bde8b67dfc6df55ab6e98e5807620ec15cd3a7e45d8b3d495a5f3085ca6cfcfa800e7920fce8a9ea650d5e5a7f0d5d123970b8da7f6
-
SSDEEP
6144:YxKiZ/Rix3qUCoesIEttxjXyOt8IKnbiWoX6yzRz4IB/MCZO1B8y:YxKiOAUpesRjtfKWWS9KIBRZOQy
Malware Config
Signatures
Files
-
f42917dff4ad9573cc154d6bdabd69c428f706a6d9dd12825c6f522242503f58.exe windows x86
9335917dd70aa2ca2e9c1e79c99fb096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationW
SetErrorMode
CloseHandle
GetModuleHandleA
GetProcAddress
HeapReAlloc
GetProcessHeap
HeapAlloc
GetCommandLineA
ExitProcess
GetStartupInfoA
advapi32
CryptAcquireContextA
ws2_32
bind
gethostbyname
getpeername
Sections
RbKKxxYh Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE