Static task
static1
Behavioral task
behavioral1
Sample
964b29fc84de31ab0a5d141d024a9372838dc724a5641db79f0c3a1324eda73e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
964b29fc84de31ab0a5d141d024a9372838dc724a5641db79f0c3a1324eda73e.exe
Resource
win10v2004-20220901-en
General
-
Target
964b29fc84de31ab0a5d141d024a9372838dc724a5641db79f0c3a1324eda73e
-
Size
76KB
-
MD5
07bedf1aa43960132b0488504a06a5c0
-
SHA1
31ecd500e1b831a6a8d6e9c9cd3793e5d865dae4
-
SHA256
964b29fc84de31ab0a5d141d024a9372838dc724a5641db79f0c3a1324eda73e
-
SHA512
791468459827c27fa0157518738ecc4addc65cbf2b8e09d9d7c08f0020c790ade5a71c87f474b9dc16b146bbab834ff06e45a549b75ce14503925db45a1f0f98
-
SSDEEP
1536:PvVeV8mBrEk1gk0Ffo6ZHEyzWGmi4cvQTIPEnL27pjVrs2ryrd1vUQuq6:FoBAk1gkhgEyzWG3aIP+EHs2qo
Malware Config
Signatures
Files
-
964b29fc84de31ab0a5d141d024a9372838dc724a5641db79f0c3a1324eda73e.exe windows x86
836bf8473d79ac2da91d505c56c63755
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushInstructionCache
PrivCopyFileExW
CreateNlsSecurityDescriptor
GetNamedPipeHandleStateA
CloseConsoleHandle
FatalAppExitA
PeekNamedPipe
InitAtomTable
DeleteTimerQueueTimer
FindFirstVolumeMountPointA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE