Static task
static1
Behavioral task
behavioral1
Sample
0549d7c707191f459c91c9c40b3032c89ba95e8048eaf8f3014c2d5690396ca5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0549d7c707191f459c91c9c40b3032c89ba95e8048eaf8f3014c2d5690396ca5.exe
Resource
win10v2004-20220812-en
General
-
Target
0549d7c707191f459c91c9c40b3032c89ba95e8048eaf8f3014c2d5690396ca5
-
Size
76KB
-
MD5
6ab84082d561b4abaa0dbd4b76f8a7a2
-
SHA1
000af827ec911b487c2b5dcf4661ba60cbd0aaf7
-
SHA256
0549d7c707191f459c91c9c40b3032c89ba95e8048eaf8f3014c2d5690396ca5
-
SHA512
f741fc45c4f9a58cc5d17f1c5682275d0bbc53c83ecdb42f4e106da79683912bf2166e2f2d4cd04a09a2516a6a8cd4136889183ce1daf70aa6554507b7bf841b
-
SSDEEP
1536:s0teh96etX0EeJ8mW2n88CD4udWLFq8vfS82hW8fPL9:2Ln2JW2n81UQWbv68vYL9
Malware Config
Signatures
Files
-
0549d7c707191f459c91c9c40b3032c89ba95e8048eaf8f3014c2d5690396ca5.exe windows x86
43a91d3dd74a8d01d75d856c54e0848b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
GetDiskFreeSpaceW
FindResourceExW
HeapFree
PeekNamedPipe
GetThreadPriority
Module32NextW
SetDefaultCommConfigW
lstrcatW
FreeConsole
VirtualBufferExceptionHandler
ZombifyActCtx
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE