Static task
static1
Behavioral task
behavioral1
Sample
1436c14427888832d7bdb21ec4a547f5b76804da9614ef7c545a98f8aa02f5bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1436c14427888832d7bdb21ec4a547f5b76804da9614ef7c545a98f8aa02f5bd.exe
Resource
win10v2004-20220812-en
General
-
Target
1436c14427888832d7bdb21ec4a547f5b76804da9614ef7c545a98f8aa02f5bd
-
Size
831KB
-
MD5
922b515645630f118720ea1c8a6e8a90
-
SHA1
16b4b0ae263b8697ceae38617f2daef59ffc5be7
-
SHA256
1436c14427888832d7bdb21ec4a547f5b76804da9614ef7c545a98f8aa02f5bd
-
SHA512
8a850a0055e6eb4ab7b2e56a40c3fe77e34151fa0b37fd33f2691c95935185a1114fbe12ac3e488fb7b7413181fd3aa3cd3d398b191f009c988b33f0615cb47f
-
SSDEEP
12288:ytz+fCRkIrGoG7lWzEPxSxh/iwNdifBRV03vTJHhZIyMrFhnB:ytzsYkI4Wz5lNdERa/TJBZ0v
Malware Config
Signatures
Files
-
1436c14427888832d7bdb21ec4a547f5b76804da9614ef7c545a98f8aa02f5bd.exe windows x86
3570ea37d94ad06b0cc36532b393f3f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleW
WriteConsoleA
CopyFileA
GetPrivateProfileStringA
HeapAlloc
GetVolumeInformationA
GetFileAttributesA
LoadLibraryA
GetDriveTypeA
VirtualAlloc
CopyFileA
GetTimeFormatA
FreeEnvironmentStringsW
CompareStringW
GetEnvironmentVariableA
CreateFileMappingW
CreateDirectoryA
msdtcuiu
DtcPerfOpen
PerfDllRegisterServer
DtcPerfCollect
DtcPerfClose
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 812KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE