Static task
static1
Behavioral task
behavioral1
Sample
5cf33201702e8f01a0a73e91165114dba025caddc13760eb84af1a4c5cb633a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5cf33201702e8f01a0a73e91165114dba025caddc13760eb84af1a4c5cb633a7.exe
Resource
win10v2004-20220812-en
General
-
Target
5cf33201702e8f01a0a73e91165114dba025caddc13760eb84af1a4c5cb633a7
-
Size
63KB
-
MD5
652e86a6b83d0ecfbe5983bdf5206d80
-
SHA1
332b90e3a369c1880b459decb4e2644b00bbdbdf
-
SHA256
5cf33201702e8f01a0a73e91165114dba025caddc13760eb84af1a4c5cb633a7
-
SHA512
86f51d3ef28d8cacdf98c6f393aae00046e7c228e508c6c9e8de60e5952ea08328b837aa15d85b52da31069023419c92958a823dba68a0d9658e6c08f31df4bf
-
SSDEEP
1536:VsYlCyu81747zFcoDYrAUxZYAYyUUPsCkGEBM64HVES:+SP74lc2yAUJUUU1G6F4Hl
Malware Config
Signatures
Files
-
5cf33201702e8f01a0a73e91165114dba025caddc13760eb84af1a4c5cb633a7.exe windows x86
86807df18fe1d9fec826f6165a7c08bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstVolumeMountPointW
BackupWrite
ReleaseActCtx
GetConsoleCommandHistoryLengthW
HeapUsage
GetLinguistLangSize
MoveFileWithProgressA
GetLogicalDriveStringsW
GetCurrentActCtx
RegisterWowBaseHandlers
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE