Static task
static1
Behavioral task
behavioral1
Sample
3784d8432dff10b2b2a618b68547e0d2de18e25afcc00493394309e2a511f04b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3784d8432dff10b2b2a618b68547e0d2de18e25afcc00493394309e2a511f04b.exe
Resource
win10v2004-20220812-en
General
-
Target
3784d8432dff10b2b2a618b68547e0d2de18e25afcc00493394309e2a511f04b
-
Size
56KB
-
MD5
a241a431c121830754011b547a5f962f
-
SHA1
67671c287b031e68dbb8425a2daf49b65fb44ba7
-
SHA256
3784d8432dff10b2b2a618b68547e0d2de18e25afcc00493394309e2a511f04b
-
SHA512
29499459ef127baa8517f122c68c144569758cb39a21c8c3dfe8c9b5aa9a348a7f9144d7ee7751ca4e1536bd27d710d2dfcddbe535080e87801f631ac0f13e5a
-
SSDEEP
1536:5Z0DEKCF/LgsvAraReMM/BXLOamhDiQdVDSOF:5ZHKCJLhGXkuKDSOF
Malware Config
Signatures
Files
-
3784d8432dff10b2b2a618b68547e0d2de18e25afcc00493394309e2a511f04b.exe windows x86
2d94ebf702ddcc3c7a7b87afa674e671
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ZombifyActCtx
GetStartupInfoA
lstrcatW
GetNumaHighestNodeNumber
GetSystemTime
Module32First
GetModuleFileNameW
ContinueDebugEvent
SetCommBreak
TlsGetValue
SetNamedPipeHandleState
WriteProfileSectionW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE