Static task
static1
Behavioral task
behavioral1
Sample
f82a861e406217de98eed798a6f35e0f7198ee308c12050b7951bb32b759eb99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f82a861e406217de98eed798a6f35e0f7198ee308c12050b7951bb32b759eb99.exe
Resource
win10v2004-20220812-en
General
-
Target
f82a861e406217de98eed798a6f35e0f7198ee308c12050b7951bb32b759eb99
-
Size
320KB
-
MD5
64e7885a133909f73c8c90ece55ed6d0
-
SHA1
84656009f479d3af941048d980ef683b37de1d4b
-
SHA256
f82a861e406217de98eed798a6f35e0f7198ee308c12050b7951bb32b759eb99
-
SHA512
6befd9daa78fbb0eb7a451fdf66af4da65eb6c7cf8eb24824e3a8cc581835f7f163116382bdc967dd29822a61788096b17c891686f882e8ccfb211fc8979cd29
-
SSDEEP
6144:lwccccq/efXvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Ev2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f82a861e406217de98eed798a6f35e0f7198ee308c12050b7951bb32b759eb99.exe windows x86
06d48081407c1ba934c690d3a1a2f369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetStartupInfoA
SetVolumeLabelW
IsBadWritePtr
Process32First
DisableThreadLibraryCalls
GetPrivateProfileSectionNamesW
SignalObjectAndWait
GetSystemInfo
EnumResourceLanguagesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE