Static task
static1
Behavioral task
behavioral1
Sample
d26ff3dd4cc2f7a0c3ff30143cd2537d2ee53950f32b3fa44ab8dcaa83eb6bc8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d26ff3dd4cc2f7a0c3ff30143cd2537d2ee53950f32b3fa44ab8dcaa83eb6bc8.exe
Resource
win10v2004-20220812-en
General
-
Target
d26ff3dd4cc2f7a0c3ff30143cd2537d2ee53950f32b3fa44ab8dcaa83eb6bc8
-
Size
320KB
-
MD5
a0d06ddd5da2156f84d92ea703816370
-
SHA1
990e0199c91d2bdeba9b24d208430125355b6e5b
-
SHA256
d26ff3dd4cc2f7a0c3ff30143cd2537d2ee53950f32b3fa44ab8dcaa83eb6bc8
-
SHA512
d96fd4f3b49c567df216a4743553a0cd245030e25fc72c27a3c59d84bf2e078c2e0c4f2ccde78c8b580e799717ba08301db3c21f38ead01788d6f71a0b24786a
-
SSDEEP
6144:5ZlV0NWsmT7DH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:57aK7r2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
d26ff3dd4cc2f7a0c3ff30143cd2537d2ee53950f32b3fa44ab8dcaa83eb6bc8.exe windows x86
9a2bb12eb40e06447484f8f243548f59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
SetVolumeMountPointW
DeviceIoControl
GetVolumePathNamesForVolumeNameA
OpenWaitableTimerA
SetFilePointer
MapViewOfFile
CreateMutexA
BeginUpdateResourceW
lstrcmpiA
ExitProcess
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE