Static task
static1
Behavioral task
behavioral1
Sample
5218f997990fd57e21b47ecbd828e77488971154988f8e659e3ff229067de227.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5218f997990fd57e21b47ecbd828e77488971154988f8e659e3ff229067de227.exe
Resource
win10v2004-20220812-en
General
-
Target
5218f997990fd57e21b47ecbd828e77488971154988f8e659e3ff229067de227
-
Size
63KB
-
MD5
6ff5c4d11632f7e87b5b6a3dd9db3442
-
SHA1
0af81935382b459e2e1ee38233fabf51eecfad2c
-
SHA256
5218f997990fd57e21b47ecbd828e77488971154988f8e659e3ff229067de227
-
SHA512
5bcb1787c00d10d0c35306d5cda5a95b0d1022f0eec801f7ab609bc3a872192b19aff5d29f4efe0376dd4485682e385b2fdc1007c88a8ccf55cff6890f6335ac
-
SSDEEP
1536:ltGJvE0YV1+wkRckKxflVepCDYez9LEsCimMDsas7t7z6:ltGY+wkWEpq9LSs+z6
Malware Config
Signatures
Files
-
5218f997990fd57e21b47ecbd828e77488971154988f8e659e3ff229067de227.exe windows x86
66fb6bc13e8d9b2a4cc0309f0f396776
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceFrequency
GetLogicalProcessorInformation
AssignProcessToJobObject
LocalShrink
Process32Next
FindFirstVolumeMountPointA
OpenFileMappingW
SetConsoleCursor
GetFullPathNameA
FindNextVolumeMountPointA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE