Static task
static1
Behavioral task
behavioral1
Sample
2f563e42425f3617ac780d4319a59ae75752e9c6516994b5f189c26778c7aabe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f563e42425f3617ac780d4319a59ae75752e9c6516994b5f189c26778c7aabe.exe
Resource
win10v2004-20220812-en
General
-
Target
2f563e42425f3617ac780d4319a59ae75752e9c6516994b5f189c26778c7aabe
-
Size
810KB
-
MD5
6994d6660dc46d3292579b6c29698161
-
SHA1
1e077cc12275e51533e84b4993a2468a03ec58e9
-
SHA256
2f563e42425f3617ac780d4319a59ae75752e9c6516994b5f189c26778c7aabe
-
SHA512
da499707400bbe8a3220068384c9d07231a590dec7d7f184e5c2b6ef360840ca9174edfcdce9a98d8289d42d4949bd68bc244fa62b5e768077fdfbb02df5c5a9
-
SSDEEP
24576:pB2Y1bXJQES35y4Op/GZJJcdN4By3IMgjCJv:pB9pSy4Oh+ydN+y3RgjC
Malware Config
Signatures
Files
-
2f563e42425f3617ac780d4319a59ae75752e9c6516994b5f189c26778c7aabe.exe windows x86
c2ac7b7a52cbb5c03a1f553c595af789
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLogicalDriveStringsA
GetLastError
CreateSemaphoreA
GetLastError
GetModuleHandleA
VirtualProtectEx
MoveFileW
IsBadStringPtrW
lstrcpyA
GetLastError
GetFullPathNameA
GetLastError
GetLastError
LoadLibraryExW
SetCurrentDirectoryA
GetLastError
GetLastError
printui
bPrinterSetup
bFolderRefresh
vDocumentDefaults
vQueueCreate
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Rdata Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ