Static task
static1
Behavioral task
behavioral1
Sample
f76f414794153dafc75bf1449fe6651c40f33896ad31577266b195d3294a10c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f76f414794153dafc75bf1449fe6651c40f33896ad31577266b195d3294a10c2.exe
Resource
win10v2004-20220812-en
General
-
Target
f76f414794153dafc75bf1449fe6651c40f33896ad31577266b195d3294a10c2
-
Size
495KB
-
MD5
7555f89413b5af4e655e4e1f676de0b0
-
SHA1
19bc1eca8066ba2fe81d9d292c71952126b00da0
-
SHA256
f76f414794153dafc75bf1449fe6651c40f33896ad31577266b195d3294a10c2
-
SHA512
c6db5d565b019f80af2241ba3ed7236c48ee8611b3d5ed2d8c86854debe47c51cdb1d842558bf9f81d7ce4bd54b1be8c3e24a9705eda48ceea6c66b898daf302
-
SSDEEP
12288:QmISWbvFTgbTRe9cFPIXHrwdmdqniK/JvhP:QmI9tYKKm4V
Malware Config
Signatures
Files
-
f76f414794153dafc75bf1449fe6651c40f33896ad31577266b195d3294a10c2.exe windows x86
1646b92a66982e3d61962c29c44b2764
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AddAccessAllowedAce
ntdll
RtlCreateTimer
kernel32
GetCommandLineA
GetCurrentProcessId
user32
GetClipboardOwner
Sections
.text Size: 488KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 147B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE