Static task
static1
Behavioral task
behavioral1
Sample
10be63db90bbe0f5b6b11b8c84c4d1efdde2359c4e3e4658b2eb188636d5ffe8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
10be63db90bbe0f5b6b11b8c84c4d1efdde2359c4e3e4658b2eb188636d5ffe8.exe
Resource
win10v2004-20220812-en
General
-
Target
10be63db90bbe0f5b6b11b8c84c4d1efdde2359c4e3e4658b2eb188636d5ffe8
-
Size
232KB
-
MD5
657dae81931646d348752bc0db957e6b
-
SHA1
bbe7e91cecb7c2119d164b00e935d7a0bb923632
-
SHA256
10be63db90bbe0f5b6b11b8c84c4d1efdde2359c4e3e4658b2eb188636d5ffe8
-
SHA512
1f656f53c55d81a39b858cf43f611b598d834aa253cb75652637c1cad40f40e2551180f21e96d4449dbd98be1091093dfad2d2851f6e258fdc85e4e612828e65
-
SSDEEP
3072:a7kkLr1E3gE0GmYIad8K0Yj5BzsJt2U3+bmOdWsKkG7jeixfOVMS/N:erLrCwEavYj5xvu+btdbKkuaCOVMSl
Malware Config
Signatures
Files
-
10be63db90bbe0f5b6b11b8c84c4d1efdde2359c4e3e4658b2eb188636d5ffe8.exe windows x86
eabb4280ac342645164868dcdab18c4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
FreeResource
SetEnvironmentVariableW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
TlsGetValue
QueryPerformanceCounter
user32
CreateAcceleratorTableA
GetQueueStatus
gdi32
DeleteObject
msvcrt
__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
...... Size: 4KB - Virtual size: 780B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
..... Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
acamphg Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcatcds Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE