Static task
static1
Behavioral task
behavioral1
Sample
943948487ab208eed67332e74a7accf3f486f3140fd75eeccaf39c0c15c67560.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
943948487ab208eed67332e74a7accf3f486f3140fd75eeccaf39c0c15c67560.exe
Resource
win10v2004-20221111-en
General
-
Target
943948487ab208eed67332e74a7accf3f486f3140fd75eeccaf39c0c15c67560
-
Size
360KB
-
MD5
f20f05d8b947af51465ff2d0dfd9f952
-
SHA1
581fc155426cc45bed55d07670885c58d87ab2a0
-
SHA256
943948487ab208eed67332e74a7accf3f486f3140fd75eeccaf39c0c15c67560
-
SHA512
935648d0d8ff00cf9023c022b5bcf1cbeeda7bcea05b0fcb2907fb796fb18cfbf2b43045f0267fb0642861f9051b526c7145d5a477bd4abce494886c8aa95806
-
SSDEEP
6144:2icJefb54RDQyQydPqmoOCLvtyMIufpr4ZHlWIlUDz4GMOizecxPyv:2iwefmRymyrtyihCHHUDs9zN
Malware Config
Signatures
Files
-
943948487ab208eed67332e74a7accf3f486f3140fd75eeccaf39c0c15c67560.exe windows x86
ac46fd45e5f1c02c5fb1c124e80be9ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
Sleep
ExitProcess
GetLastError
GetModuleHandleA
VirtualFreeEx
GetSystemDirectoryA
GetProcAddress
advapi32
CopySid
AddAce
ole32
CoUninitialize
avifil32
AVIStreamCreate
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 768KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ