Static task
static1
Behavioral task
behavioral1
Sample
fc44e49d1abbd2661bb0fae0e6388c9326654aaf134295dd4bbe4ee44e51c58c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc44e49d1abbd2661bb0fae0e6388c9326654aaf134295dd4bbe4ee44e51c58c.exe
Resource
win10v2004-20220812-en
General
-
Target
fc44e49d1abbd2661bb0fae0e6388c9326654aaf134295dd4bbe4ee44e51c58c
-
Size
320KB
-
MD5
a1b1bdbd941b2139e7eed995576a7ab0
-
SHA1
a64985a2ec15418618a7de9f0cb2ca2f6abb6428
-
SHA256
fc44e49d1abbd2661bb0fae0e6388c9326654aaf134295dd4bbe4ee44e51c58c
-
SHA512
c24a44a38ba4c8ded4a34db1fc2f64fc191d05849b8a431044a21ced276ced2c7d1ea94cb20775b15718fedc83524f62c833e0ca470ac1e5c57422dfb94cf936
-
SSDEEP
6144:EP7nO2p0gOVw3kIDH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:oONgOVwL2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
fc44e49d1abbd2661bb0fae0e6388c9326654aaf134295dd4bbe4ee44e51c58c.exe windows x86
f964294a2df34cb5e38f08ea7973e484
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesW
WriteConsoleOutputW
SetVolumeMountPointW
NumaVirtualQueryNode
CreateMailslotA
WriteProfileSectionA
GetExitCodeThread
FindResourceA
OpenThread
BeginUpdateResourceA
GetProcessWorkingSetSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE