Static task
static1
Behavioral task
behavioral1
Sample
c11c4895a4b6972dde7c6852633f62b737db0f16b82d04a9f63f4775af85b8de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c11c4895a4b6972dde7c6852633f62b737db0f16b82d04a9f63f4775af85b8de.exe
Resource
win10v2004-20221111-en
General
-
Target
c11c4895a4b6972dde7c6852633f62b737db0f16b82d04a9f63f4775af85b8de
-
Size
7KB
-
MD5
09300e2a049b5efb3b265196d8ba0b2f
-
SHA1
8e7f384837593b392de67bfa83a2a62c0950666c
-
SHA256
c11c4895a4b6972dde7c6852633f62b737db0f16b82d04a9f63f4775af85b8de
-
SHA512
efd683b7e81dfa264f5da439bdf9af71445e08ee439bd1aae4529d8aa7cb1a61925325dd48e41c100c07452a95793745d40f0b4d1c822bfa2d2621242ef43ac1
-
SSDEEP
192:96TOQq/RCXrMN8fuxB/3/DqLnLsQoZC/:9sOQq/kS/3/+cDk/
Malware Config
Signatures
Files
-
c11c4895a4b6972dde7c6852633f62b737db0f16b82d04a9f63f4775af85b8de.exe windows x86
c279d4ce4586739c7e8c216f4035cb7d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetEndOfFile
SetFilePointer
WriteFile
LocalAlloc
GetFileSize
CreateFileA
ReadFile
Sleep
FormatMessageA
GetLastError
LocalFree
crtdll
??2@YAPAXI@Z
puts
_iob
??3@YAXPAX@Z
printf
fflush
exit
_amsg_exit
__GetMainArgs
fputs
fprintf
_strcmpi
user32
CharToOemA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ