Static task
static1
Behavioral task
behavioral1
Sample
250a53b26a830fd1898816943cd9af01fe2dcf667f1916813e2cfaee218c616b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
250a53b26a830fd1898816943cd9af01fe2dcf667f1916813e2cfaee218c616b.exe
Resource
win10v2004-20220812-en
General
-
Target
250a53b26a830fd1898816943cd9af01fe2dcf667f1916813e2cfaee218c616b
-
Size
113KB
-
MD5
bf81a542be328a09a36fbcf6b5f56cae
-
SHA1
61afbd4ebc2ad1581beac2b02450f736e76e9ad7
-
SHA256
250a53b26a830fd1898816943cd9af01fe2dcf667f1916813e2cfaee218c616b
-
SHA512
7e976e30f82b5e462776c763221680c19ec1a125f141944532710359d4248c6cf473e83c9a877139bff3dab2e04511d4a6e8a0c12ed842ee35227b7ec19a2a9c
-
SSDEEP
3072:4y5UZgpxaeLxy/cE4nDQ8x8Nqp3MCaoVk:4y5UpeLicECD9uNqmEV
Malware Config
Signatures
Files
-
250a53b26a830fd1898816943cd9af01fe2dcf667f1916813e2cfaee218c616b.exe windows x86
118089d1b63b0f880e42e2ad61f640c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
DeleteFileA
CopyFileA
GetTempFileNameA
GetTempPathA
FreeLibrary
SetErrorMode
GetProcAddress
LoadLibraryA
MultiByteToWideChar
FreeEnvironmentStringsA
VirtualAlloc
HeapAlloc
GetLastError
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetPrivateProfileStringA
GetOEMCP
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeW
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
user32
GetTopWindow
MessageBoxA
wsprintfA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
H!Y? Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE