Static task
static1
Behavioral task
behavioral1
Sample
df06e9a8458ebfc352b5195496b02adc9e34210d15ec44c8f5e7c6b4ae38b167.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
df06e9a8458ebfc352b5195496b02adc9e34210d15ec44c8f5e7c6b4ae38b167.exe
Resource
win10v2004-20220812-en
General
-
Target
df06e9a8458ebfc352b5195496b02adc9e34210d15ec44c8f5e7c6b4ae38b167
-
Size
320KB
-
MD5
0a54d59b1a78507416fad1be6dc41320
-
SHA1
eec3749507c890e2572665f710d2608c321a0c65
-
SHA256
df06e9a8458ebfc352b5195496b02adc9e34210d15ec44c8f5e7c6b4ae38b167
-
SHA512
14635287a693b37789bfecc68978ece2f8921035068803958f8a7e18d7dbd8d15c2037250c3b0744158fa1bacfd090fc36792f8e4d81290aa9febb36365800b3
-
SSDEEP
6144:qo7xWzYMy9H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:qZ8Myd2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
df06e9a8458ebfc352b5195496b02adc9e34210d15ec44c8f5e7c6b4ae38b167.exe windows x86
0bf69fe52d5ad93f890c9d50b290abc4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
CompareStringA
GetNumaHighestNodeNumber
SetConsoleMenuClose
DeviceIoControl
CopyLZFile
SetCommState
LocalUnlock
LocalHandle
SetFileValidData
ReadFileScatter
GetProcessId
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE