Static task
static1
Behavioral task
behavioral1
Sample
a31496637531168f8311579f75ac84267bb3ffd297b56d30c8e8a135c857f613.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a31496637531168f8311579f75ac84267bb3ffd297b56d30c8e8a135c857f613.exe
Resource
win10v2004-20220812-en
General
-
Target
a31496637531168f8311579f75ac84267bb3ffd297b56d30c8e8a135c857f613
-
Size
5.5MB
-
MD5
31532755d6c3df5b9887305fd222c20e
-
SHA1
e7db3023c973a3b54f7e81786f94f66d861e17e1
-
SHA256
a31496637531168f8311579f75ac84267bb3ffd297b56d30c8e8a135c857f613
-
SHA512
34e7e0bfae192f84ab375f95c312aebfb13862f9826a149474db565fd79b05d68672c6d7291fb8cc5f49f1ed54fa9738625a55e7d27d27c8c0a42079426a45c2
-
SSDEEP
49152:PY4JULcuSH/NzbpJO3CJXTKXo8lOk8AUXCL/kBM5ww/c1R0QhZ7Yk9NPnMB/M:P8LWH/dbpo3ejGoANUw6Y2NfM5M
Malware Config
Signatures
Files
-
a31496637531168f8311579f75ac84267bb3ffd297b56d30c8e8a135c857f613.exe windows x86
1cd364a9e949d5ecebd6c614e64bc545
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 868KB - Virtual size: 964KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 816B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 4B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ