Static task
static1
Behavioral task
behavioral1
Sample
40c18220ac4f4d4a4536032b801810d3dfb2705ee1529a10764dc610e80076b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
40c18220ac4f4d4a4536032b801810d3dfb2705ee1529a10764dc610e80076b8.exe
Resource
win10v2004-20220901-en
General
-
Target
40c18220ac4f4d4a4536032b801810d3dfb2705ee1529a10764dc610e80076b8
-
Size
76KB
-
MD5
72357f435ef84fab2ac0921e3cf5af0f
-
SHA1
8f25062c303138f59ed4c12c1500eda224ab69d6
-
SHA256
40c18220ac4f4d4a4536032b801810d3dfb2705ee1529a10764dc610e80076b8
-
SHA512
7915840b57be9e1579a6ff5c0bf61b8f21f789a22d6e64d115bddadd343e2a42adf1847d151003112cea8cfe6fcacba49e4233dfd5d7c0a26b705df764aec32e
-
SSDEEP
1536:1Zf8Z5vXuEGK67zgcwtPWh5RJUER2t/6GpjVrs2ryrd1vUQuq6:7fo5vXdAwpft/6GHs2qo
Malware Config
Signatures
Files
-
40c18220ac4f4d4a4536032b801810d3dfb2705ee1529a10764dc610e80076b8.exe windows x86
8b8c103dfc257f390e296592e1edc497
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleNumberOfCommandsW
GetExpandedNameW
CreateProcessA
GetCurrentProcessId
Heap32Next
GetProfileStringW
SetCurrentDirectoryW
InterlockedFlushSList
GetNumaNodeProcessorMask
BackupSeek
HeapQueryInformation
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE