Static task
static1
Behavioral task
behavioral1
Sample
2470fe55b22a4d77cd815e153b9edb0ca9a2124dac72a2f3094ea528c317c13a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2470fe55b22a4d77cd815e153b9edb0ca9a2124dac72a2f3094ea528c317c13a.exe
Resource
win10v2004-20220812-en
General
-
Target
2470fe55b22a4d77cd815e153b9edb0ca9a2124dac72a2f3094ea528c317c13a
-
Size
61KB
-
MD5
8185483d2bb45849c81975c8778b4a54
-
SHA1
5af226a755e5649e4a334d57c71ea53a0b499919
-
SHA256
2470fe55b22a4d77cd815e153b9edb0ca9a2124dac72a2f3094ea528c317c13a
-
SHA512
7a3760d3b51f1195ef943878f0bc45564375b26c9aece005ef87a4108fd6f805e0ca709d3bb54f37050b8bde04741b10289302b1c304420f4aad4a489e3b230f
-
SSDEEP
1536:1n7x6hqVApxKdWpDYXYiqCyqlaxpS0DVJr2PH8Ko5ZT0SHMw:177CDtDYoTM0rr2f8KoLT0Ssw
Malware Config
Signatures
Files
-
2470fe55b22a4d77cd815e153b9edb0ca9a2124dac72a2f3094ea528c317c13a.exe windows x86
2ac1c3aa6874ddea3b9d04516eed7067
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TermsrvAppInstallMode
GetConsoleProcessList
LoadLibraryExA
ReadFile
GetComputerNameExW
SystemTimeToTzSpecificLocalTime
SleepEx
GetFirmwareEnvironmentVariableW
SetCommMask
GetCalendarInfoW
UnmapViewOfFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE