Static task
static1
Behavioral task
behavioral1
Sample
c51c31e826c04be7174a1fdbb1bfc1f6088ac0109a225aa97b548859fffb3123.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c51c31e826c04be7174a1fdbb1bfc1f6088ac0109a225aa97b548859fffb3123.exe
Resource
win10v2004-20221111-en
General
-
Target
c51c31e826c04be7174a1fdbb1bfc1f6088ac0109a225aa97b548859fffb3123
-
Size
219KB
-
MD5
9f649bbac1634671d1cdc0f3372021e1
-
SHA1
492b7a2f4132be2453849c34374a35687e58b80d
-
SHA256
c51c31e826c04be7174a1fdbb1bfc1f6088ac0109a225aa97b548859fffb3123
-
SHA512
8b6041ef1b23a44d4acec165390a57579aa04115b72651d6a2313e99551fd6bbd2ac507283ec2f2762b7a8effff083e8c66fc277404f92541c35e92ed1c52fb1
-
SSDEEP
6144:e8hfRm7mQn3t1FFDIb03GU6V15F9q2ED8w1QMv:vo7mQnHDi03GUq153ZSdQMv
Malware Config
Signatures
Files
-
c51c31e826c04be7174a1fdbb1bfc1f6088ac0109a225aa97b548859fffb3123.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE