Static task
static1
Behavioral task
behavioral1
Sample
2D0000.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2D0000.exe
Resource
win10v2004-20220901-en
General
-
Target
2D0000.exe
-
Size
156KB
-
MD5
641645f7373be3c2e7575bcc67256a95
-
SHA1
281595d0916272e209626fb753186419d217d6da
-
SHA256
54b0ab0858e86f2e955c81bf2ede5b9b821f8426794bd92e7aa8180afb83457e
-
SHA512
5b5f9d267d7c7bf54af4cf0858cac60fa9a1ab3860e1680a810046d928c826f923859b45f74924a1fe770dfe0c046035534cb0d0691b3ecaa258b01c4693bff0
-
SSDEEP
3072:98XDZ3HL9q/bbBzBifo60K8CMxI09+N5/v:WXKb5BiYNZkN5/v
Malware Config
Signatures
Files
-
2D0000.exe.exe windows x64
f0457f592cb6623fae51f7d4ebd0268f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
RtlVirtualUnwind
ntdll
RtlGetNativeSystemInformation
msvcrt
_getch
_vsnwprintf
memset
_wfopen
fgetws
feof
fclose
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.c Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.d Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE