Static task
static1
Behavioral task
behavioral1
Sample
af1f6836650e85b14f7018903ff2efb68e29b22362de550ed2f0477399ee88df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af1f6836650e85b14f7018903ff2efb68e29b22362de550ed2f0477399ee88df.exe
Resource
win10v2004-20221111-en
General
-
Target
af1f6836650e85b14f7018903ff2efb68e29b22362de550ed2f0477399ee88df
-
Size
172KB
-
MD5
9144edf477e83affb1864bd7983eac64
-
SHA1
45a41ac388f6799dc064e0ceba859a6c616af2aa
-
SHA256
af1f6836650e85b14f7018903ff2efb68e29b22362de550ed2f0477399ee88df
-
SHA512
4ef6dc0aa815630f8f4a672081a3f0e01010034252df9aa036f9221ca183344282a8e4356fe1e9c33f6ffcb2ae4ece4bc9de710ac3e59e63b6efd73d039aa146
-
SSDEEP
1536:8K+8crdP1Xyp7OWl3jLxMIUePcnBa5Sa6Fkn5QosufvXc7Vmo+dlUPn9Ou:8K+8CzsLl3BMIWn5YHO0flA
Malware Config
Signatures
Files
-
af1f6836650e85b14f7018903ff2efb68e29b22362de550ed2f0477399ee88df.exe windows x86
9e79a2ac2a462e132ecea420b4c08bec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceW
CopyFileA
GetFileSize
GetFileTime
FindResourceW
CopyFileExW
DeleteFileA
CreateDirectoryA
CreateFileA
DeleteFileW
GetConsoleMode
FindNextVolumeA
CopyFileW
DeleteFileA
ExitProcess
CreateMutexA
OpenFileMappingA
WriteFile
CreateFileA
FindResourceW
WriteFile
CreateMutexA
OpenFileMappingA
FindResourceA
GetStdHandle
Sections
DATA Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ