Static task
static1
Behavioral task
behavioral1
Sample
af5583fb92cbdad8f1d9e59d58ea28fb9b2f2a1256cb8f047cbfd1a9334ced09.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af5583fb92cbdad8f1d9e59d58ea28fb9b2f2a1256cb8f047cbfd1a9334ced09.exe
Resource
win10v2004-20220901-en
General
-
Target
af5583fb92cbdad8f1d9e59d58ea28fb9b2f2a1256cb8f047cbfd1a9334ced09
-
Size
316KB
-
MD5
d5cc92580c2ddb37a6f891d56d841c74
-
SHA1
0a3a071073de34811061f2ca200f4925d21c6e24
-
SHA256
af5583fb92cbdad8f1d9e59d58ea28fb9b2f2a1256cb8f047cbfd1a9334ced09
-
SHA512
3f0f1973735010c2f410987ad0a995f82cfea8bf6503b850673348354e48acf0e53f39ed47b2184ef2d10c204631fb47ca922b5cff498ff8e6dbf9a5634625fc
-
SSDEEP
6144:LdV8J5NCl/i/0LtfeBWQzEPoP0/R1/w8JpyiyUAZEWN57+Y:Lrg5NvIOYos51/w8LyioZEWz71
Malware Config
Signatures
Files
-
af5583fb92cbdad8f1d9e59d58ea28fb9b2f2a1256cb8f047cbfd1a9334ced09.exe windows x86
fd145841c8d854c9cce1c426d7019bd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetLastError
VirtualFreeEx
ExitProcess
Sleep
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetCurrentThread
HeapFree
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
HeapReAlloc
HeapAlloc
user32
LoadIconA
IsIconic
advapi32
CryptAcquireContextA
CryptGenKey
ole32
CoUninitialize
avifil32
AVISaveOptionsFree
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 738KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ