Static task
static1
Behavioral task
behavioral1
Sample
38cfedffc3134cd49c05ef3486cdde80bbc0ea660e5a6becc59724980f2c3df5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38cfedffc3134cd49c05ef3486cdde80bbc0ea660e5a6becc59724980f2c3df5.exe
Resource
win10v2004-20220812-en
General
-
Target
38cfedffc3134cd49c05ef3486cdde80bbc0ea660e5a6becc59724980f2c3df5
-
Size
272KB
-
MD5
6e9617156e7a61390be4a7da08d94fad
-
SHA1
2ba6cb609789dc5dc53b28fb02c27b88c2a419f8
-
SHA256
38cfedffc3134cd49c05ef3486cdde80bbc0ea660e5a6becc59724980f2c3df5
-
SHA512
51b29d5eec2503063e16ca67808628968ea7c10907339eb892c518d562efa5eac9fe6319050fa2330f6bd2b89605cc2c2c2bf8cb32b874dd48ceba07cfcdd0a2
-
SSDEEP
1536:auLfRrqEEYe6DRzA987+PxXa/NRdbECgYrXYOr0EzD/ScHJn:auNzR8987+PxwmYMhEzD/Scpn
Malware Config
Signatures
Files
-
38cfedffc3134cd49c05ef3486cdde80bbc0ea660e5a6becc59724980f2c3df5.exe windows x86
ce78acc54946f43336f3b80396cfe163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
__p__commode
calloc
_controlfp
_XcptFilter
__getmainargs
__p___initenv
free
_initterm
__p__fmode
_adjust_fdiv
_exit
__set_app_type
_except_handler3
kernel32
VirtualProtectEx
IsDebuggerPresent
GetProcessHeap
FreeEnvironmentStringsA
GetFileAttributesA
GetModuleHandleW
FileTimeToDosDateTime
GetFileType
GetCPInfo
GetThreadLocale
OpenProcess
SetStdHandle
CreateProcessW
GetModuleHandleA
TerminateProcess
GetOEMCP
CompareStringW
GetProcAddress
FlushFileBuffers
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE