Static task
static1
Behavioral task
behavioral1
Sample
0076a6e6588698ee14f6f1f01466fd6a5470e005d3c4dbf61f9099f528484754.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0076a6e6588698ee14f6f1f01466fd6a5470e005d3c4dbf61f9099f528484754.exe
Resource
win10v2004-20220812-en
General
-
Target
0076a6e6588698ee14f6f1f01466fd6a5470e005d3c4dbf61f9099f528484754
-
Size
80KB
-
MD5
10e17544e063bbb6471f11c1aa2e1f61
-
SHA1
8657bb76badd319621d1a7d306d14cbdfddf4c58
-
SHA256
0076a6e6588698ee14f6f1f01466fd6a5470e005d3c4dbf61f9099f528484754
-
SHA512
67e66d13a5cfd4738724752008272111c2613a6d6d06dcf9cf9a890039150e12d8505427c9f334b3ca1c4cdca335ed2e5bf15b6d5aae22dcc5f3d2dd8767f357
-
SSDEEP
1536:ScJ9oLCze57WxKKu4czmEd/2djyfZiqv43LCmaG82hW8fPL:5SMxKKuHmI/A00qA3Wq8vYL
Malware Config
Signatures
Files
-
0076a6e6588698ee14f6f1f01466fd6a5470e005d3c4dbf61f9099f528484754.exe windows x86
2548822ae498b2779ef34c254594b3cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
WriteProfileSectionW
GetNumaProcessorNode
GetFileTime
WriteFileEx
SetTapePosition
GetFileAttributesA
GetSystemWow64DirectoryA
MapViewOfFileEx
GetNumaAvailableMemoryNode
MoveFileWithProgressW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE