Static task
static1
Behavioral task
behavioral1
Sample
5cff972d9e0cced5d08de5c31d60f6ab48013a2219e6955e76a12521ce64e54c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5cff972d9e0cced5d08de5c31d60f6ab48013a2219e6955e76a12521ce64e54c.exe
Resource
win10v2004-20220901-en
General
-
Target
5cff972d9e0cced5d08de5c31d60f6ab48013a2219e6955e76a12521ce64e54c
-
Size
83KB
-
MD5
2f7d93b14cb52e1636c127855dad4c3a
-
SHA1
2ea62e080c2a79bbe96d82e7b61c7da0d3ade6c9
-
SHA256
5cff972d9e0cced5d08de5c31d60f6ab48013a2219e6955e76a12521ce64e54c
-
SHA512
5dc0c32265385620a751c3d6854f2b62988b0e0cef902105878d7b77e92dddcea6e487da99c4770b97d63a1a6d707d103ff45ea2cae3b343c33f36f47d06416e
-
SSDEEP
1536:/ZhjSTVrY9twVfT7VEiNtq76nWjCbJivFw2QbL3Hr70pjVrs2ryrd1vUQuq:/ZhsM9twVfT7uyU6nWyJaHQrAHs2q
Malware Config
Signatures
Files
-
5cff972d9e0cced5d08de5c31d60f6ab48013a2219e6955e76a12521ce64e54c.exe windows x86
a28d41c581052fafa87675ad77a1f19d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LZStart
InvalidateConsoleDIBits
AddLocalAlternateComputerNameA
GetOverlappedResult
DisableThreadLibraryCalls
OpenJobObjectA
ActivateActCtx
SetFilePointerEx
SetUserGeoID
QueueUserAPC
LocalHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE