Static task
static1
Behavioral task
behavioral1
Sample
02197b561c4c4c74475f3dccce9f8f06d7bd5c04f24a39d905044e57ebcddb48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
02197b561c4c4c74475f3dccce9f8f06d7bd5c04f24a39d905044e57ebcddb48.exe
Resource
win10v2004-20220812-en
General
-
Target
02197b561c4c4c74475f3dccce9f8f06d7bd5c04f24a39d905044e57ebcddb48
-
Size
86KB
-
MD5
bcd04c766697b55346ab07f78303266f
-
SHA1
0452ac1cb576adc738563ae83698992bd287c936
-
SHA256
02197b561c4c4c74475f3dccce9f8f06d7bd5c04f24a39d905044e57ebcddb48
-
SHA512
98dbafb371a4699e5191d04ba1f34b986890a966c5c248ea8ccb4e1459472b2e1d56f51fbdff60e70aec81cf4d800d87b4d9c939183d27312c188088bbb95545
-
SSDEEP
1536:SJmFC8xtlraMKM47ttiKVKBEA+sOKd0G4TY5Nf1BnJNP7dcf7T61s5Varlj:SJmFCh/MC66K6G4mNf1Njdw7T2cVarlj
Malware Config
Signatures
Files
-
02197b561c4c4c74475f3dccce9f8f06d7bd5c04f24a39d905044e57ebcddb48.exe windows x86
2a0845a7ef48bfe5525ba15cf17a41d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
DosPathToSessionPathA
FindNextVolumeMountPointW
EnumerateLocalComputerNamesW
GetDriveTypeA
MapViewOfFileEx
AddVectoredExceptionHandler
GetNumberOfConsoleFonts
BaseCheckAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE