Behavioral task
behavioral1
Sample
11571478973f94e40d8256ec4efc020b1bac7ec317a2396cd33860f5cf44ed20.exe
Resource
win7-20231215-en
General
-
Target
11571478973f94e40d8256ec4efc020b1bac7ec317a2396cd33860f5cf44ed20
-
Size
1.3MB
-
MD5
3d4d4228e98809c0854380ff2382808a
-
SHA1
91ce318ae04a36d2605248c95df931f24627fa38
-
SHA256
11571478973f94e40d8256ec4efc020b1bac7ec317a2396cd33860f5cf44ed20
-
SHA512
b79e93bd6c505c52d0594dcfb1d154a0171091fd5fb76ebb2936cd91c52cffccbaa808d6e44ac671d53d8b331f5caf2a39345559f052d5a53b30047ca5f3484b
-
SSDEEP
24576:O/emrBI/48nX25IjLlC9lsqPwoNL9004Ul9W5AjUKF4rf0guCvGIan/viV+0pUl:O/emdIAsX26jLlC9lR4oL9NMVr8gNavr
Malware Config
Signatures
Files
-
11571478973f94e40d8256ec4efc020b1bac7ec317a2396cd33860f5cf44ed20.exe windows:4 windows x86 arch:x86
32c5de998b5f069b26c94c8143b13c06
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 741KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ