Static task
static1
Behavioral task
behavioral1
Sample
292b1011c788f7643d00bd0996cd71c126e85bd520ee72756f1a61a0f0200d2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
292b1011c788f7643d00bd0996cd71c126e85bd520ee72756f1a61a0f0200d2f.exe
Resource
win10v2004-20220901-en
General
-
Target
292b1011c788f7643d00bd0996cd71c126e85bd520ee72756f1a61a0f0200d2f
-
Size
320KB
-
MD5
a21e6f8d778ea399487ab751bcad8940
-
SHA1
c4c8aa2ae58b20d4621018212314d19c39703904
-
SHA256
292b1011c788f7643d00bd0996cd71c126e85bd520ee72756f1a61a0f0200d2f
-
SHA512
c4d143e553ced9bd036da2678f58aa1bb1391e16222832d398e4a2ca9b9e5fd35627f81679e2cc9961cce150be1323e93b55872814a24bb6c95b9b982b9f4b7f
-
SSDEEP
6144:7v2qXk0ilnhhH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:7v439hp2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
292b1011c788f7643d00bd0996cd71c126e85bd520ee72756f1a61a0f0200d2f.exe windows x86
b5f950e6af4584d462a6d0ce2c2d9f20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32NextW
HeapDestroy
GetProcessIoCounters
GetCommModemStatus
GetTimeFormatW
CheckRemoteDebuggerPresent
SetLastError
Process32NextW
HeapDestroy
BaseCleanupAppcompatCacheSupport
FlushViewOfFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE