Static task
static1
Behavioral task
behavioral1
Sample
71a8857179233018faf22f01605c17681a6ef2dec11ccd02c9be6ac028622c1d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71a8857179233018faf22f01605c17681a6ef2dec11ccd02c9be6ac028622c1d.exe
Resource
win10v2004-20221111-en
General
-
Target
71a8857179233018faf22f01605c17681a6ef2dec11ccd02c9be6ac028622c1d
-
Size
150KB
-
MD5
396c3e85c5dce28ce7cfc28ae9a5b9d0
-
SHA1
669f79fea2b16a2cd434d11879f60201fb5efb93
-
SHA256
71a8857179233018faf22f01605c17681a6ef2dec11ccd02c9be6ac028622c1d
-
SHA512
b1301d700211a52ed7802db22b5d4e93bfd2ef4c705ccb4628d3f9a69a0a12ec0081cbcdc41f33ff27d8d19d626ff03ab8222f4bb093ae3cdcf09c60e1ce60d6
-
SSDEEP
3072:MwctuJp5sgLMnZKFPJ9IidFh8VaSM3eF4MitAdJ3+pJA7:MwctuD5FYng9Iidr+k3qquJSK7
Malware Config
Signatures
Files
-
71a8857179233018faf22f01605c17681a6ef2dec11ccd02c9be6ac028622c1d.exe windows x86
c7ba464847fe80374431db188890c850
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW
user32
GetCursorInfo
crtdll
__GetMainArgs
exit
raise
signal
ulib
??0PATH@@QAE@XZ
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
ntdll
RtlFreeHeap
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 880B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc2 Size: 108B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE