Static task
static1
Behavioral task
behavioral1
Sample
66941075faf0a6dcb8585045358ef8ca86a1c50f6ad803cdbffe4e1bd3463138.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
66941075faf0a6dcb8585045358ef8ca86a1c50f6ad803cdbffe4e1bd3463138.exe
Resource
win10v2004-20220812-en
General
-
Target
66941075faf0a6dcb8585045358ef8ca86a1c50f6ad803cdbffe4e1bd3463138
-
Size
320KB
-
MD5
65a5f99cf8b145f24d5d070f0a3c7670
-
SHA1
acd9030394bc5ca68ce88326aa0d922ae11ab4fb
-
SHA256
66941075faf0a6dcb8585045358ef8ca86a1c50f6ad803cdbffe4e1bd3463138
-
SHA512
faaa896562dc4b8993393a8ad8c733ae95437c17653993491267d4ba79370d65f3d9d073f592d59ae66b815e46f1e3e88490ee928d8c5a214d7cc6f57b51fd34
-
SSDEEP
6144:Tm+rNLlLiH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:TPa2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
66941075faf0a6dcb8585045358ef8ca86a1c50f6ad803cdbffe4e1bd3463138.exe windows x86
26d6a6a64540b999ef5fe5506004877b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
VirtualLock
RtlFillMemory
DeleteFileA
SetConsoleCursorPosition
FindAtomW
GetTempPathW
LZInit
WriteProcessMemory
SetCPGlobal
FlushConsoleInputBuffer
GetCompressedFileSizeW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE