Static task
static1
Behavioral task
behavioral1
Sample
f48c12d88a9308001fbcab3356acd1f38c1373a4f10c3864e1ecce07abc7d70f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f48c12d88a9308001fbcab3356acd1f38c1373a4f10c3864e1ecce07abc7d70f.exe
Resource
win10v2004-20221111-en
General
-
Target
f48c12d88a9308001fbcab3356acd1f38c1373a4f10c3864e1ecce07abc7d70f
-
Size
69KB
-
MD5
7d4fb6a08b8fed9fc1766151f2d98bc0
-
SHA1
4d70a66a2e824e967e43720e8423442eebfd170a
-
SHA256
f48c12d88a9308001fbcab3356acd1f38c1373a4f10c3864e1ecce07abc7d70f
-
SHA512
b33cb9b94f768eff36ead4e02368bdaa8bbb41460d2b27bef38c8b7c96170468c04f18628c1d25c80869b73a1f36abba3f107ae8aaa93706c178d2629c625cac
-
SSDEEP
1536:Zg8wlDAUG5L3TtovB4FrHdQiLbfLVgiNDimXoOdIh/LKI/HnG:UNArZDHdQiL3VJ4bR/WIPn
Malware Config
Signatures
Files
-
f48c12d88a9308001fbcab3356acd1f38c1373a4f10c3864e1ecce07abc7d70f.exe windows x86
edf75a2b6ff3863f7a42700f8833d5ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetFileSize
GetModuleHandleA
GetCPInfo
WriteFile
lstrcmpW
lstrcpynW
lstrcpynW
GetCommandLineW
GetCPInfo
GetTimeFormatW
GetModuleHandleA
TerminateProcess
GetTimeFormatW
Sleep
lstrcmpW
lstrcmpW
ReadFile
TerminateProcess
ReadFile
GetCPInfo
OpenFile
ReadFile
GetDateFormatW
lstrcpynW
GetLocalTime
MulDiv
GetModuleHandleA
GetCommandLineW
lstrcpynW
WriteFile
GetDateFormatW
lstrcpynW
Sections
.text Size: 61KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
wqcf Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ