Static task
static1
Behavioral task
behavioral1
Sample
14b369252e44e14983b3493b5cef8a00eac334a96b9c42f50777586c760ba0e4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
14b369252e44e14983b3493b5cef8a00eac334a96b9c42f50777586c760ba0e4.exe
Resource
win10v2004-20220901-en
General
-
Target
14b369252e44e14983b3493b5cef8a00eac334a96b9c42f50777586c760ba0e4
-
Size
56KB
-
MD5
46d6583c910b39d5dcae29ab4ebc8aa8
-
SHA1
1e5f86577829d7b82c6daa0eeef53f86e19e7bf7
-
SHA256
14b369252e44e14983b3493b5cef8a00eac334a96b9c42f50777586c760ba0e4
-
SHA512
e3a419322a66e2b8e3d939c54dc4fd7b717115218c50548b2340eb54b6b40ec7bf9357cd90445a73c7493b445ecd1efbccb916616c0990d293b9f115ec133f1c
-
SSDEEP
1536:k377pWvbCzRO9FVDYld7J2FFztunHnIYQ:kLEvb2IFmv27tuHBQ
Malware Config
Signatures
Files
-
14b369252e44e14983b3493b5cef8a00eac334a96b9c42f50777586c760ba0e4.exe windows x86
127da9cf3a2a6e52be81242c68b7a831
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddConsoleAliasA
GetCPInfo
GetProcessId
BackupWrite
AssignProcessToJobObject
FindNextFileA
GetNextVDMCommand
CreateIoCompletionPort
GetAtomNameW
GetComputerNameW
InterlockedCompareExchange
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE