Static task
static1
Behavioral task
behavioral1
Sample
4f726e763a033c4074de4943ae39b2247f50f22bb4e3f21682e1199c245f5425.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4f726e763a033c4074de4943ae39b2247f50f22bb4e3f21682e1199c245f5425.exe
Resource
win10v2004-20220812-en
General
-
Target
4f726e763a033c4074de4943ae39b2247f50f22bb4e3f21682e1199c245f5425
-
Size
320KB
-
MD5
a096b6d6ff3fab3d25f4738627d01d10
-
SHA1
2e769e0c6effa0625e4b8d3b146b069e520a1cc4
-
SHA256
4f726e763a033c4074de4943ae39b2247f50f22bb4e3f21682e1199c245f5425
-
SHA512
7e3b116807565508a727c1128384ffaf6fb22e6a55cf56b95533238b63a8d9125aed9a3b41ee6a32eb67793f7b2ecda2ae73ae4c188035f4331e2a0054755403
-
SSDEEP
6144:kESqj8OKvH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:bSXL2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
4f726e763a033c4074de4943ae39b2247f50f22bb4e3f21682e1199c245f5425.exe windows x86
d2b99a89b3d14665dece2dbc6cd98320
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
GetCommModemStatus
ReadFileEx
DeleteFileW
BeginUpdateResourceW
FindNextVolumeW
AddLocalAlternateComputerNameW
GetFileType
GetLocaleInfoW
SetCurrentDirectoryW
lstrlenA
GlobalMemoryStatus
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE