Static task
static1
Behavioral task
behavioral1
Sample
f0a7fe1a7dccd141100e6eb76d745ba6f0b8351c85eb8824506a9a5eb4d18268.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f0a7fe1a7dccd141100e6eb76d745ba6f0b8351c85eb8824506a9a5eb4d18268.exe
Resource
win10v2004-20220812-en
General
-
Target
f0a7fe1a7dccd141100e6eb76d745ba6f0b8351c85eb8824506a9a5eb4d18268
-
Size
320KB
-
MD5
a243bc313f73fe203ed3b8d02eee4c30
-
SHA1
bf02d9f4438ecdca34e32c3d534f6bd0d974447a
-
SHA256
f0a7fe1a7dccd141100e6eb76d745ba6f0b8351c85eb8824506a9a5eb4d18268
-
SHA512
e4c93786eba9fa0e75fbb0ec2251c9ca4dff27142720139178242e18ea90e74dcd2c3ab4b7e8b9f1aff795aa91cb5a6b30e303b26fa97806723d92ffa72a6d99
-
SSDEEP
6144:680uqXQmHH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:DuXQmn2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f0a7fe1a7dccd141100e6eb76d745ba6f0b8351c85eb8824506a9a5eb4d18268.exe windows x86
4a21c6ab92c24f3e5bd63947dc1c8eb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BackupWrite
MulDiv
ExpandEnvironmentStringsW
InterlockedIncrement
ProcessIdToSessionId
GetTapeStatus
CreateWaitableTimerA
GlobalDeleteAtom
AttachConsole
GetProcessHeap
GetConsoleSelectionInfo
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE