Static task
static1
Behavioral task
behavioral1
Sample
20bd7ba5e1421ab6edf6dfb533ccefec031a13b75a4ba2727caea65b1b39762b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20bd7ba5e1421ab6edf6dfb533ccefec031a13b75a4ba2727caea65b1b39762b.exe
Resource
win10v2004-20220812-en
General
-
Target
20bd7ba5e1421ab6edf6dfb533ccefec031a13b75a4ba2727caea65b1b39762b
-
Size
4.0MB
-
MD5
0afbe73bbc5ed84fc107577ebc14d45a
-
SHA1
6514e1af0c07372af42f5fea284e3e48d786fbe0
-
SHA256
20bd7ba5e1421ab6edf6dfb533ccefec031a13b75a4ba2727caea65b1b39762b
-
SHA512
02a9bca4d875965812bce37c58bbc8dff9e5cc5def35ca16e6735ca69ed22293f535283f7b6be15e339e6e907b6ac0957ead7b5fe58cc71ac4012b97b19a780f
-
SSDEEP
98304:/96NoT6TxO8XnDYPOj8ndwDpvXeYV2mVxuuXq:/knDYPOdDpvz04
Malware Config
Signatures
Files
-
20bd7ba5e1421ab6edf6dfb533ccefec031a13b75a4ba2727caea65b1b39762b.exe windows x86
700948302a6b8b0813a17c8a1ea87c7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
qcore
cmb_setItemText
mfc42
ord1576
msvcrt
_setmbcp
kernel32
GetStartupInfoA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
wmvert
wm_pstr
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.=c) Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ld* Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qNW Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ