Static task
static1
Behavioral task
behavioral1
Sample
b3320ddb20b49ed5a9cd0772a1a076c2f99c244d1a6d4c2a0cc1af863f9bb7de.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3320ddb20b49ed5a9cd0772a1a076c2f99c244d1a6d4c2a0cc1af863f9bb7de.exe
Resource
win10v2004-20220901-en
General
-
Target
b3320ddb20b49ed5a9cd0772a1a076c2f99c244d1a6d4c2a0cc1af863f9bb7de
-
Size
119KB
-
MD5
6ccf835159baf53db8e8e52fdb956a8f
-
SHA1
0320e84ef77fdba4ba144479302f7ec365b5659e
-
SHA256
b3320ddb20b49ed5a9cd0772a1a076c2f99c244d1a6d4c2a0cc1af863f9bb7de
-
SHA512
9d840c1dea3bcbd1f02a00c4288b2b8f68bf907bec26d6a43ac7dfabab3379024963b671876eda4b7407c8dfc08a0301550c0834eb09a3fc75a0c40416c79751
-
SSDEEP
1536:OCXuMTN52yX8Im8yAe5A1kYu/mib+3f7vfSv0RpjVrs2ryrd1vUQuqSSqK5tnCvv:OCXuMTN52yX8Im8cCTuubfrHs2qxnC
Malware Config
Signatures
Files
-
b3320ddb20b49ed5a9cd0772a1a076c2f99c244d1a6d4c2a0cc1af863f9bb7de.exe windows x86
1bfd8b3e20871ad902db174de980e7b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFreeEx
FindAtomA
BackupWrite
WideCharToMultiByte
SetThreadPriorityBoost
Module32NextW
LoadLibraryExW
CopyLZFile
FreeConsole
ZombifyActCtx
SetCommBreak
CopyFileExA
GetNativeSystemInfo
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE