Static task
static1
Behavioral task
behavioral1
Sample
2484ace8586edf4e1c5af16f385c7b75c8371622484184e3c496f12467b46570.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2484ace8586edf4e1c5af16f385c7b75c8371622484184e3c496f12467b46570.exe
Resource
win10v2004-20220901-en
General
-
Target
2484ace8586edf4e1c5af16f385c7b75c8371622484184e3c496f12467b46570
-
Size
364KB
-
MD5
9f7de0323f99c4dd33adfb86cf2ba35a
-
SHA1
f69260bea2893cf6861d34ca8196d0c4b32d349d
-
SHA256
2484ace8586edf4e1c5af16f385c7b75c8371622484184e3c496f12467b46570
-
SHA512
82fd0f4f28a6fd20531b4a3dadf861e0059a832784244b4c08bcf9101f9dc774de8589a470059d09640c547b4ca0081faaa858833cf1332e394fb382f1b964a4
-
SSDEEP
6144:lvmEgbx40aYdYvun8mep5ShEqHDAB2GwPYFmxB85nnJLWNBkwwjzsHgtW0ztBJvC:0Egbi0dYvun8b2EuD1B85nV7VtWebviF
Malware Config
Signatures
Files
-
2484ace8586edf4e1c5af16f385c7b75c8371622484184e3c496f12467b46570.exe windows x86
9c5c49bbd991585e6a35ce471cd75ad9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ResetEvent
GetModuleHandleA
VirtualAlloc
GetProcAddress
VirtualFree
GetProcessHeap
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeW
user32
SendMessageA
winmm
mciSendCommandA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 711KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ