Static task
static1
Behavioral task
behavioral1
Sample
2d1daf6764c441f59032e3cd8c20310c8d16597f6b2a20974960e8024f4745a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d1daf6764c441f59032e3cd8c20310c8d16597f6b2a20974960e8024f4745a4.exe
Resource
win10v2004-20220901-en
General
-
Target
2d1daf6764c441f59032e3cd8c20310c8d16597f6b2a20974960e8024f4745a4
-
Size
56KB
-
MD5
6aaddd4f29c79daf0a7f42a35176333a
-
SHA1
8ff06b44a6928af734860fe0b223d062cf12c733
-
SHA256
2d1daf6764c441f59032e3cd8c20310c8d16597f6b2a20974960e8024f4745a4
-
SHA512
58292634f42330e0ed4126d31c4c48de0da3a80e4d1b1c7cfbd11ecd50624646185d3b91ee63ccd20c82657e8ac912fc12828434c5c1b7cfec4ed00d30cdf4de
-
SSDEEP
1536:vw5XZqjm/7beDLwazxNPFKcd2k8h+JZ+t6xaDySGKbCeZwE:OJqjm/7bK0azxFF3d21hOwApzKbn
Malware Config
Signatures
Files
-
2d1daf6764c441f59032e3cd8c20310c8d16597f6b2a20974960e8024f4745a4.exe windows x86
0ac6c0353ab496112bd903d192b0dfde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekConsoleInputA
GetVolumePathNameA
CreateProcessInternalWSecure
FindNextVolumeMountPointW
OpenJobObjectW
BeginUpdateResourceW
GetProfileIntA
GetProcessVersion
OpenEventW
QueryDepthSList
OpenProcess
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE