Static task
static1
Behavioral task
behavioral1
Sample
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9.exe
Resource
win10v2004-20220901-en
General
-
Target
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9
-
Size
150KB
-
MD5
afd35b6f76a0e0ace9a65cbc3f3c4b5a
-
SHA1
0b35aec0bc0847072db37ebbc2f8b81d4b487eb4
-
SHA256
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9
-
SHA512
a8b7d49cac2bc853b53aa367d300869f95445f6bf7e76fce426294b691a9d0389dcc269b24b10b5d950086ac7187250d8fd784b5a80d4c644203005a5ba87671
-
SSDEEP
3072:38iPF5VGEK02g5FcMLKNXwSIWcGJ9ckhrrpYFgaQCny5bJHlfX9BrEEj:9PF5FHtIX8VGJ9c2rp70QdHVtBrEEj
Malware Config
Signatures
Files
-
af1ff8a3d8aed270785dd63bec7ca666b69d0eddf04714130b02f8115c8d9fd9.exe windows x86
efc228e650a63f4871e864dc32a803ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
user32
GetCursorInfo
crtdll
__GetMainArgs
exit
raise
signal
ulib
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 724B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 477B - Virtual size: 477B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE