Static task
static1
Behavioral task
behavioral1
Sample
52a608e8cd56197c3c5665d06d7fcaea3667e3d466444b1c7cb983d4be08bdf0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
52a608e8cd56197c3c5665d06d7fcaea3667e3d466444b1c7cb983d4be08bdf0.exe
Resource
win10v2004-20220812-en
General
-
Target
52a608e8cd56197c3c5665d06d7fcaea3667e3d466444b1c7cb983d4be08bdf0
-
Size
65KB
-
MD5
db31330b66963e7631f1d0ae367a9886
-
SHA1
95d7c85eb8b78b8f7ed7c15f8936c2ffa88265c8
-
SHA256
52a608e8cd56197c3c5665d06d7fcaea3667e3d466444b1c7cb983d4be08bdf0
-
SHA512
091b39c16aa9dc046f5b3b2c5e2240b42a20c9baf4a4412f32cacd401e92f115c05e777b0958fae4af560b2b77a9089d3d9e844ae41ef5eea88767a47b306ddb
-
SSDEEP
1536:EY2tJJd97A0Q6zz8kq2w9r4sTIi2cpYTyKl:L2Ln97ASuAii
Malware Config
Signatures
Files
-
52a608e8cd56197c3c5665d06d7fcaea3667e3d466444b1c7cb983d4be08bdf0.exe windows x86
9bcc1fbae15a2fd67e100545b3d23589
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageA
SetConsoleMode
CreateWaitableTimerA
lstrcat
MoveFileW
VirtualProtect
GetVolumeInformationW
TerminateJobObject
SetSystemPowerState
VirtualQuery
GlobalFindAtomW
Heap32ListNext
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE