Static task
static1
Behavioral task
behavioral1
Sample
938b486a0941cffa7e6f75f44694fb60df7e399bbcfa272f59121ab09c22efdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
938b486a0941cffa7e6f75f44694fb60df7e399bbcfa272f59121ab09c22efdf.exe
Resource
win10v2004-20220812-en
General
-
Target
938b486a0941cffa7e6f75f44694fb60df7e399bbcfa272f59121ab09c22efdf
-
Size
32KB
-
MD5
0030d0505d7d07e60798170f9da69cf6
-
SHA1
5356dc16fd3385e91213584de9f7563620652419
-
SHA256
938b486a0941cffa7e6f75f44694fb60df7e399bbcfa272f59121ab09c22efdf
-
SHA512
48aa7d11d155ce3481668082a0bf0383256ac79af8026f9eead59f02d33a597b19ad49516703b2c6d41897c5beca921d8bdecd9f47c0b12eed95f71818ddc523
-
SSDEEP
768:mdVtjfXkTQ5yav2GheckdEBY2kBhTcPw8OamMUt3UBnz:m/t/yabVPBYZBtc4erUtkBz
Malware Config
Signatures
Files
-
938b486a0941cffa7e6f75f44694fb60df7e399bbcfa272f59121ab09c22efdf.exe windows x86
f92559edfa1db136be6cf760556a76a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
GetCommandLineA
GetVersion
GetModuleHandleA
LoadLibraryA
FindResourceExA
MapViewOfFileEx
GetAtomNameW
ReadFileScatter
FindFirstFileExW
CallNamedPipeW
msvcrt
strcpy
__mb_cur_max
strstr
wcscmp
strlen
realloc
abs
_fullpath
_strcmpi
_XcptFilter
strncmp
memset
_wtoi
_itoa
malloc
_wcsicmp
_chdir
_vsnprintf
__p__fmode
iswctype
wcscat
memcpy
_waccess
wcscpy
wcsstr
_wsplitpath
__setusermatherr
_wfopen
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.int Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ