Static task
static1
Behavioral task
behavioral1
Sample
f8fa6c081ff01137f76493e842ad16e502194a841be87c36eb0e9dd65448991a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8fa6c081ff01137f76493e842ad16e502194a841be87c36eb0e9dd65448991a.exe
Resource
win10v2004-20220812-en
General
-
Target
f8fa6c081ff01137f76493e842ad16e502194a841be87c36eb0e9dd65448991a
-
Size
76KB
-
MD5
6a3274e4bc2ec3d5e33a6d17197119f5
-
SHA1
debccaa58a7aa0225729951a2235f88cc1dc8711
-
SHA256
f8fa6c081ff01137f76493e842ad16e502194a841be87c36eb0e9dd65448991a
-
SHA512
ef45f1f95e9a7789f1a8358d8675d5614646c419a2661e9a368313be653ebd01d56d31145439b38f6789df8caad0af26adcd6f4570ec9f4b8c89dacd3cb70aed
-
SSDEEP
1536:xdSHSwWBEZjol/pWao1R+3uZGyZaWP3rJgrjEErxTWDTMqhGKYIZTET8x:yHSNBEJolh41RMuZG/2grjBkMqhGKZTF
Malware Config
Signatures
Files
-
f8fa6c081ff01137f76493e842ad16e502194a841be87c36eb0e9dd65448991a.exe windows x86
d28ad6893b67a8066c8877ad43d0621a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualQuery
_hread
PeekNamedPipe
GetNumaProcessorMap
SetConsoleScreenBufferSize
VirtualFreeEx
SetLastError
SetFileValidData
DeleteVolumeMountPointA
VerifyConsoleIoHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE