Static task
static1
Behavioral task
behavioral1
Sample
f0d813250c66043aca7d5bebd9a66fdbf8466abf9a6224c7629d2a5b0496c4c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0d813250c66043aca7d5bebd9a66fdbf8466abf9a6224c7629d2a5b0496c4c4.exe
Resource
win10v2004-20220901-en
General
-
Target
f0d813250c66043aca7d5bebd9a66fdbf8466abf9a6224c7629d2a5b0496c4c4
-
Size
350KB
-
MD5
f95396dc60e9aea67d063d418f4648ed
-
SHA1
6d44a4979d84b215a8b05f835d0f70f32df9eef2
-
SHA256
f0d813250c66043aca7d5bebd9a66fdbf8466abf9a6224c7629d2a5b0496c4c4
-
SHA512
b81e73615188a8c2818e7798cfe4431726c6a45fd70b54f00a82ac3cc8ac099d047f69318bc604e2b57a2da04ff217378e9cba6905f7485c1b13530af3efba2a
-
SSDEEP
6144:X0kzCFqBsHKK2Vlk9MXIpDfcKw+7WX+EgNuqE+iZQC5Cu9ysvY/rwBTN/8Wt72AI:Xaylk9M4pr5w+7WOEgNfE+ieutpwTwTQ
Malware Config
Signatures
Files
-
f0d813250c66043aca7d5bebd9a66fdbf8466abf9a6224c7629d2a5b0496c4c4.exe windows x86
3103d0e0d01f81ce34ae977817677c0a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
SetErrorMode
CreateMailslotW
EnumCalendarInfoW
FreeLibrary
LoadLibraryA
IsBadCodePtr
UnhandledExceptionFilter
GetEnvironmentStrings
GlobalFlags
GetWindowsDirectoryA
VirtualQuery
SetHandleCount
LCMapStringA
GetModuleHandleA
GetTickCount
InterlockedExchange
LocalFree
InterlockedDecrement
LocalAlloc
GetThreadPriority
GetCurrentThreadId
LockResource
GetVersion
CloseHandle
oleaut32
LPSAFEARRAY_UserFree
CreateErrorInfo
VarUI1FromI1
GetErrorInfo
SetErrorInfo
VariantInit
SysFreeString
userenv
RegisterGPNotification
UnregisterGPNotification
Sections
.text Size: 220KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE