Static task
static1
Behavioral task
behavioral1
Sample
00a1f174d793bd1000665bb0f1e2cc7f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
00a1f174d793bd1000665bb0f1e2cc7f.exe
Resource
win10v2004-20220901-en
General
-
Target
00a1f174d793bd1000665bb0f1e2cc7f.bin
-
Size
775KB
-
MD5
00a1f174d793bd1000665bb0f1e2cc7f
-
SHA1
961f2ad1dc36fed83aa794aaecc257c20ac63ed9
-
SHA256
d6c8de6b89d0c7df6bc51757fbece6cdc7061431c45a275d882db50cfaf808e9
-
SHA512
9e0ad51be38e0f19fca0dc511bfdb31b6b69ee7361d5e46a4991f4a835d2ec55e15a978161dd4cc40cd10f3260a9dfdcafea728b7746767afad069843fd6c81e
-
SSDEEP
24576:BIi6TeztmE9iiWNuVgjHkz/Wog27jp+4x:/h9iLHg/22XN
Malware Config
Signatures
Files
-
00a1f174d793bd1000665bb0f1e2cc7f.bin.exe windows x86
00290cfab314aa14f191bc41fd883d40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
user32
wsprintfW
ws2_32
gethostbyname
msvcp60
??0_Winit@std@@QAE@XZ
msvcrt
_adjust_fdiv
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 765KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ