Static task
static1
Behavioral task
behavioral1
Sample
a363c5cb70a5aa70250244805dd53118ce0d52bbe4f62c163402376c97922d91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a363c5cb70a5aa70250244805dd53118ce0d52bbe4f62c163402376c97922d91.exe
Resource
win10v2004-20220812-en
General
-
Target
a363c5cb70a5aa70250244805dd53118ce0d52bbe4f62c163402376c97922d91
-
Size
320KB
-
MD5
a0f36d81b4b5940f57b84521faf96450
-
SHA1
c3569fb7b0f10ddc53f86abbff8f2962238310af
-
SHA256
a363c5cb70a5aa70250244805dd53118ce0d52bbe4f62c163402376c97922d91
-
SHA512
bcd6f7ede5388faccff6a5a4caaad79c3a91604a80e818fcc73631f88add589e7441c2a68627d286b73d42e39e8bf454f64f0e1b151c701fdc2e5eaa71f9d1ad
-
SSDEEP
6144:zv62Hs5qMH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:zvzan2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
a363c5cb70a5aa70250244805dd53118ce0d52bbe4f62c163402376c97922d91.exe windows x86
129e8dd73c5a55ad0e06a709f8cf5606
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadHugeReadPtr
GetDiskFreeSpaceA
SetLocalPrimaryComputerNameW
ExpungeConsoleCommandHistoryW
CopyLZFile
CmdBatNotification
FindFirstChangeNotificationA
GetDevicePowerState
SetThreadIdealProcessor
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE