Static task
static1
Behavioral task
behavioral1
Sample
f273c7fff10b04050f6df59e492f75bb8ec0428bca89dd23b3c9f27334451bb7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f273c7fff10b04050f6df59e492f75bb8ec0428bca89dd23b3c9f27334451bb7.exe
Resource
win10v2004-20220812-en
General
-
Target
f273c7fff10b04050f6df59e492f75bb8ec0428bca89dd23b3c9f27334451bb7
-
Size
298KB
-
MD5
9245e53de4ec78e7f10d86ed18061116
-
SHA1
40f747575136291a0c2f17383533650f99eb6075
-
SHA256
f273c7fff10b04050f6df59e492f75bb8ec0428bca89dd23b3c9f27334451bb7
-
SHA512
07ff7e0c9c78a189072937eb0d7786dc33977a2df695d3d0b70ee04f1db182b9c9e1c766c385a3d9d19aa236ed0ea24a4ff41cd4b1731b02f6f537b72acdbacf
-
SSDEEP
6144:DXv9moyZKU4ZOzJW2anFOFJ4e6V5bcpFo4w6IbLBrI7roEiVpn:TvQZZacI2AFAy9V5bEFoJLBrIYEiVt
Malware Config
Signatures
Files
-
f273c7fff10b04050f6df59e492f75bb8ec0428bca89dd23b3c9f27334451bb7.exe windows x86
c2297e8c7cbed5319ef45b83789d51bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameW
CloseHandle
GetConsoleMode
SetVolumeLabelA
CreateFileA
GetFullPathNameW
CreateSemaphoreA
GetEnvironmentVariableW
CreateFileMappingA
Sleep
CloseHandle
CopyFileA
GetCurrentDirectoryW
ReadConsoleW
FindNextVolumeW
GetStringTypeA
FindFirstVolumeW
GetFullPathNameW
VirtualFree
HeapCreate
GetModuleHandleW
CloseHandle
GetModuleHandleA
dbghelp
ImageRvaToVa
FindFileInPath
ImageRvaToSection
ImageNtHeader
Sections
.text Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.RES Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avdr Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE