Static task
static1
Behavioral task
behavioral1
Sample
f3e20eb5457cc9eac615918c040e56f330ff765675cd7b85afda7f695b034282.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3e20eb5457cc9eac615918c040e56f330ff765675cd7b85afda7f695b034282.exe
Resource
win10v2004-20220901-en
General
-
Target
f3e20eb5457cc9eac615918c040e56f330ff765675cd7b85afda7f695b034282
-
Size
76KB
-
MD5
6c1a0a6eacbf823ef00af609a44f7d06
-
SHA1
3dddb6c216b0b2f3ee40088485621eec99341dd5
-
SHA256
f3e20eb5457cc9eac615918c040e56f330ff765675cd7b85afda7f695b034282
-
SHA512
761e4b8314215e51788a3a154648e466c80bd77f0d268b78d5b592bfe016061c6f73e44a0781e37d88c2afce724a8db30a032d6a767a7f245da7bd49875daa2f
-
SSDEEP
1536:zgaM74JDiEksEmWAMmhD3Px/v8MKTwzNcjEErxTWDTMqhGKYIZTET8x:czS2EemPMiD3p/v8dc6jBkMqhGKZTbx
Malware Config
Signatures
Files
-
f3e20eb5457cc9eac615918c040e56f330ff765675cd7b85afda7f695b034282.exe windows x86
fd3a5b846c8deb440d14cc367bbf012d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32FirstW
GetDefaultCommConfigA
ClearCommError
SetProcessPriorityBoost
FindVolumeClose
GetNumaProcessorNode
LZStart
LocalCompact
IsBadStringPtrW
GetProcessPriorityBoost
MapViewOfFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE