Static task
static1
Behavioral task
behavioral1
Sample
f9001f8c3da18f40b4e98292bbac016beca5d4eb6a26b34a4535b916a4e46124.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9001f8c3da18f40b4e98292bbac016beca5d4eb6a26b34a4535b916a4e46124.exe
Resource
win10v2004-20220812-en
General
-
Target
f9001f8c3da18f40b4e98292bbac016beca5d4eb6a26b34a4535b916a4e46124
-
Size
56KB
-
MD5
ed52d7bea358349755258e59ce04ceb1
-
SHA1
406d5af0dd0af7f0f89f6648fbd7e888d75435f6
-
SHA256
f9001f8c3da18f40b4e98292bbac016beca5d4eb6a26b34a4535b916a4e46124
-
SHA512
6a48b61e8c1b782fa9d97fe895f47a5c4d1a4682dc2812da945fdcb055bd5331111451f4737f6bfe0bf44512ea489a5f104345d78f57073fb9fa0d33c3f59fac
-
SSDEEP
384:pECUCo+S42aTvySwSmfnIJRWWqT+frKg4mlNHgcmy8UauHocrJRMRG7R:3rpvyQmfn2R9qTM2+gBNbuHoSMAR
Malware Config
Signatures
Files
-
f9001f8c3da18f40b4e98292bbac016beca5d4eb6a26b34a4535b916a4e46124.exe windows x86
d436e08fd9f8efca599137d81bfc3c8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
OpenFile
CreateFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
GetLastError
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
ws2_32
WSAStartup
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE