Static task
static1
Behavioral task
behavioral1
Sample
f45d9a2f769867a77206e8e61ba3ca151996dac67d098c3e044f61d46659b180.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f45d9a2f769867a77206e8e61ba3ca151996dac67d098c3e044f61d46659b180.exe
Resource
win10v2004-20220812-en
General
-
Target
f45d9a2f769867a77206e8e61ba3ca151996dac67d098c3e044f61d46659b180
-
Size
320KB
-
MD5
64a8d44a45d56d98a2a30e48d734c4a0
-
SHA1
1e279f61df05f976a729830f7e355fc1690b85e3
-
SHA256
f45d9a2f769867a77206e8e61ba3ca151996dac67d098c3e044f61d46659b180
-
SHA512
f4216cb0183b7546cc9e14adc8f9b6d6ee438f2b7d2d971b8a74cb67c919234c61866679022623328a6c07f07a8a505df3608a1829e2bbff4595a28e92d36e74
-
SSDEEP
6144:88Q/O1wH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:eOk2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f45d9a2f769867a77206e8e61ba3ca151996dac67d098c3e044f61d46659b180.exe windows x86
400a8dea304b456a8da8dd124e9351e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
DeactivateActCtx
RtlZeroMemory
GetFileAttributesA
CreateFiber
OpenSemaphoreW
AddConsoleAliasW
GetStdHandle
SetHandleContext
GetTempFileNameW
SetConsoleCursorMode
ReadConsoleOutputAttribute
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE