Static task
static1
Behavioral task
behavioral1
Sample
b457aa39ac3472d64579122e9bf8cf120f004027067b33630fef1c295754971a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b457aa39ac3472d64579122e9bf8cf120f004027067b33630fef1c295754971a.exe
Resource
win10v2004-20220812-en
General
-
Target
b457aa39ac3472d64579122e9bf8cf120f004027067b33630fef1c295754971a
-
Size
284KB
-
MD5
6385c1d027a2d6f813aab9f0edfdc270
-
SHA1
a0b306f81acd7d20a235ea93c42dd9939b582b67
-
SHA256
b457aa39ac3472d64579122e9bf8cf120f004027067b33630fef1c295754971a
-
SHA512
dbdc4a9482c183485f55bb61caf71c1977fb76a4d4103a0edd1821bd175717623824824f3196e30930344e7132441cccf2b636d9b4250d83222e52b44788700f
-
SSDEEP
6144:GxSlTeKw5DJA3adRZLGTbx+v2Fu/v7xbC2W032zLbLzUD0XlKy/UlrR:GWT69JA4vKTbkDxCnbLM01KVR
Malware Config
Signatures
Files
-
b457aa39ac3472d64579122e9bf8cf120f004027067b33630fef1c295754971a.exe windows x86
8d7684a8a25a4f1d34417a281c070bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
DiskCopy
EnableVolumeCompression
Extend
ComputeFmMediaType
Chkdsk
Format
FormatEx
kernel32
GetSystemTimeAsFileTime
GetOEMCP
LoadLibraryA
HeapAlloc
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcessId
WideCharToMultiByte
GetTickCount
CreateFileA
FindResourceW
GetCurrentProcess
GetLocalTime
SystemTimeToFileTime
CloseHandle
lstrcmpA
lstrlenW
SetLastError
MultiByteToWideChar
lstrcpyW
GetLocaleInfoW
QueryPerformanceCounter
HeapFree
w32topl
ToplSTHeapInit
ToplScheduleExportReadonly
ToplSTHeapExtractMin
ToplScheduleCacheDestroy
ToplScheduleDuration
ToplScheduleCreate
ToplSTHeapDestroy
ToplScheduleCacheCreate
Sections
.text Size: 276KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ