Static task
static1
Behavioral task
behavioral1
Sample
14051c0e54b80ca381c335063177c82053fb6cd1c13543d490507583bdc42ee6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14051c0e54b80ca381c335063177c82053fb6cd1c13543d490507583bdc42ee6.exe
Resource
win10v2004-20220812-en
General
-
Target
14051c0e54b80ca381c335063177c82053fb6cd1c13543d490507583bdc42ee6
-
Size
184KB
-
MD5
68d214c356293655078765b573fe5bc0
-
SHA1
bfb63fddc53836f2f774f1e3d8d095a0735867bc
-
SHA256
14051c0e54b80ca381c335063177c82053fb6cd1c13543d490507583bdc42ee6
-
SHA512
6db547550718f860f08b1a3aac697c06136656efb1788c51e1e49d31614d8af98b309e779491cc43919f0cdf4a408643c0467a362872aa4a3584c91dae453a57
-
SSDEEP
3072:5NtPCvz/6pHlP2Hs2qmRlixXaKa0qMW2pVol3IFEyKwL8/eAi:JP+/YFW/wguJpVopIM/eH
Malware Config
Signatures
Files
-
14051c0e54b80ca381c335063177c82053fb6cd1c13543d490507583bdc42ee6.exe windows x86
090698467f50ae2601e96703e693e89d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCommandHistoryW
GetProcessIoCounters
CloseConsoleHandle
DeleteFileW
lstrcmp
MapViewOfFile
SetLastError
WriteProcessMemory
GetConsoleAliasesLengthA
GetStringTypeA
GetCurrentDirectoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE