Static task
static1
Behavioral task
behavioral1
Sample
ad762579254047b06ef139525955ed380000ae31a7b2877ed81797b6c2bbda06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad762579254047b06ef139525955ed380000ae31a7b2877ed81797b6c2bbda06.exe
Resource
win10v2004-20220812-en
General
-
Target
ad762579254047b06ef139525955ed380000ae31a7b2877ed81797b6c2bbda06
-
Size
128KB
-
MD5
80eb7b58baba6824848b25c8982a80e3
-
SHA1
34c063b5feb8bb46d1537c4db844df6314ffabb4
-
SHA256
ad762579254047b06ef139525955ed380000ae31a7b2877ed81797b6c2bbda06
-
SHA512
9b4ba42965478bdcb186d4216b0b97b01871239c124faf22503a5ec3eae7a12179bf28f7868733c0dc4d718e10d98fc78187a449ed6395166fc4bce3caec4021
-
SSDEEP
3072:5DQU84vmNtC4e77oxmEM27sfvXaU2sOfzQOZsxxc/lWAwt:5c4wt/pMVfvXn2s8QO2xxc/gA2
Malware Config
Signatures
Files
-
ad762579254047b06ef139525955ed380000ae31a7b2877ed81797b6c2bbda06.exe windows x86
0ce51ce7912dcbe14f88c1db85f975ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
EnumDateFormatsA
FindNextVolumeW
PrivMoveFileIdentityW
SetConsoleCursorPosition
OpenEventA
GetStdHandle
GetVolumeInformationA
GlobalFlags
CreateSocketHandle
FindFirstVolumeMountPointA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 114KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE