Static task
static1
Behavioral task
behavioral1
Sample
f1c902aa68cc5553c10ca658683550de3b084aa4bc61ff7c1845393d1d252224.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1c902aa68cc5553c10ca658683550de3b084aa4bc61ff7c1845393d1d252224.exe
Resource
win10v2004-20220812-en
General
-
Target
f1c902aa68cc5553c10ca658683550de3b084aa4bc61ff7c1845393d1d252224
-
Size
320KB
-
MD5
a1a4ac59751ec63b077d1e603dbc08d0
-
SHA1
28fa57ac214304fdc7125ad28c5387f437e02ed6
-
SHA256
f1c902aa68cc5553c10ca658683550de3b084aa4bc61ff7c1845393d1d252224
-
SHA512
9577de79ae02e4f15d2e19263ebd8361c650dc28c5f03b80acbac0bea7a90293fdea928688a2f211484cf59e32754a8d8a783803bba6ca4e58bacb05d0f3587e
-
SSDEEP
6144:TcVMz9H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:A4d2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f1c902aa68cc5553c10ca658683550de3b084aa4bc61ff7c1845393d1d252224.exe windows x86
d727cc26c2d5b862ce21fbc62eadc961
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ValidateLocale
GlobalLock
GetVolumePathNamesForVolumeNameA
VirtualProtect
IsBadStringPtrA
EnumDateFormatsExW
SetProcessShutdownParameters
GetProfileIntA
CreateWaitableTimerW
CreateMutexA
QueryPerformanceCounter
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE