Static task
static1
Behavioral task
behavioral1
Sample
698ff3e85cb7947a24c62f827e85d67b7119c42a53ec885f454b9d1de4608e95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
698ff3e85cb7947a24c62f827e85d67b7119c42a53ec885f454b9d1de4608e95.exe
Resource
win10v2004-20220812-en
General
-
Target
698ff3e85cb7947a24c62f827e85d67b7119c42a53ec885f454b9d1de4608e95
-
Size
320KB
-
MD5
a11b1d7ae9b53aa3add94b2ceeb228b0
-
SHA1
a1fc19cfa8586e5622acfc894dc5b90a07c47473
-
SHA256
698ff3e85cb7947a24c62f827e85d67b7119c42a53ec885f454b9d1de4608e95
-
SHA512
557d4ad44eb0a4cf320c28d1ef355d3d73395031f5c3af203da8ea7433fa90ddf573e795aa5d8b02e08225942ec5249853d6fb61a1b4c2a4cab6a8eb2b3365fe
-
SSDEEP
6144:Tr4bCQw+kGZdiE7H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:TrFVIh2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
698ff3e85cb7947a24c62f827e85d67b7119c42a53ec885f454b9d1de4608e95.exe windows x86
bf4e4b0c778d7f52c9bc34f3f55d39b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetProcessHandleCount
SetTimeZoneInformation
FreeUserPhysicalPages
GetCurrentDirectoryA
GetSystemDefaultUILanguage
VDMConsoleOperation
DeleteVolumeMountPointW
ReadConsoleInputExA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE