Static task
static1
Behavioral task
behavioral1
Sample
48229782e49dae4539c0faaf5b93d8e19e77e47e669a9874b3a398b10a555d7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
48229782e49dae4539c0faaf5b93d8e19e77e47e669a9874b3a398b10a555d7b.exe
Resource
win10v2004-20220901-en
General
-
Target
48229782e49dae4539c0faaf5b93d8e19e77e47e669a9874b3a398b10a555d7b
-
Size
320KB
-
MD5
a0020f2cc35112b0ff0682b6010cfd70
-
SHA1
96f13113346ea96c08486370a9cdd116b591e808
-
SHA256
48229782e49dae4539c0faaf5b93d8e19e77e47e669a9874b3a398b10a555d7b
-
SHA512
a71e0a1b3ac8a9446678953e9ff8b1d09daef3e057f16da4ae6b34201415535bda77a2788af533c2b921ffbda2edc50981e44adb71e35abc947ea8a9f2742c5c
-
SSDEEP
6144:+CF9UmNbVnH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:v9ZBH2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
48229782e49dae4539c0faaf5b93d8e19e77e47e669a9874b3a398b10a555d7b.exe windows x86
11294ae86d6178f12ee851bd4b74db0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputAttribute
FindResourceW
GlobalFindAtomA
TerminateThread
GetNumaAvailableMemory
ExitVDM
EnumUILanguagesA
lstrcmp
DisconnectNamedPipe
IsValidCodePage
TerminateJobObject
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE