Static task
static1
Behavioral task
behavioral1
Sample
dfb98319094df14552d8f8a23be09a538143c50b74247ce096f1002d073cee40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfb98319094df14552d8f8a23be09a538143c50b74247ce096f1002d073cee40.exe
Resource
win10v2004-20221111-en
General
-
Target
dfb98319094df14552d8f8a23be09a538143c50b74247ce096f1002d073cee40
-
Size
28KB
-
MD5
199ed8003654d4ee10b9169c1d8b958b
-
SHA1
2fd407d699134911a8f8942caffee87ea7c7d3a3
-
SHA256
dfb98319094df14552d8f8a23be09a538143c50b74247ce096f1002d073cee40
-
SHA512
dd75a22a8c850bd36357f2c657f318d2b52d742173619162e2508717307e0f73634368f5a19f723157a0e7dd3260ce10cea2595df6e6cd0e15d034e9b8dc9a25
-
SSDEEP
384:Mxk9SugAidB0If/PoW1ucgYc0X9ggv9cra38Q26R/1plZ:J9ct3Phuc7X3lM6R/17Z
Malware Config
Signatures
Files
-
dfb98319094df14552d8f8a23be09a538143c50b74247ce096f1002d073cee40.exe windows x86
ec6e70aebddd09d4603bed4f41227150
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetStartupInfoA
msvcrt
strcpy
strcmp
_except_handler3
_exit
_XcptFilter
exit
_acmdln
memset
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strcat
free
calloc
strlen
__getmainargs
advapi32
RegOpenKeyA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 672B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE