Static task
static1
Behavioral task
behavioral1
Sample
b34cf00bee1af7016738cb5635f7622d1a857c5587c14c4792179f23724bed0f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b34cf00bee1af7016738cb5635f7622d1a857c5587c14c4792179f23724bed0f.exe
Resource
win10v2004-20220901-en
General
-
Target
b34cf00bee1af7016738cb5635f7622d1a857c5587c14c4792179f23724bed0f
-
Size
121KB
-
MD5
4257d2849410adb3f9e20757cc08cd7b
-
SHA1
7afa88abb7cb4dd8d753503084e7814907fb9bff
-
SHA256
b34cf00bee1af7016738cb5635f7622d1a857c5587c14c4792179f23724bed0f
-
SHA512
47b165ddd0250738d2991709a0df842d55713ab8221bcfa5a29475b4069858b289fa14c0d7471f0739b2e7ad8d501e37784bfcab361336de26b96cc69dd166e8
-
SSDEEP
3072:14se2EkKayQ53JrrvIScj3znsdfTSD1GAQz:fEkpyEhrvZcfnsdff
Malware Config
Signatures
Files
-
b34cf00bee1af7016738cb5635f7622d1a857c5587c14c4792179f23724bed0f.exe windows x86
c8e224275c091e8b02b2c4050eae4697
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetMessageWaitingIndicator
FindFirstFileA
PrivMoveFileIdentityW
Toolhelp32ReadProcessMemory
RemoveDirectoryA
_lcreat
SetConsoleTitleA
CreateFiberEx
GetFileAttributesExW
SetThreadPriorityBoost
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE