Static task
static1
Behavioral task
behavioral1
Sample
f260fe9759e51b60798bfdb7d54889d8b4c4851c89b7d5145cabf7dbc0f17e81.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f260fe9759e51b60798bfdb7d54889d8b4c4851c89b7d5145cabf7dbc0f17e81.exe
Resource
win10v2004-20220901-en
General
-
Target
f260fe9759e51b60798bfdb7d54889d8b4c4851c89b7d5145cabf7dbc0f17e81
-
Size
66KB
-
MD5
96fa165a9dd3a831e000cf929a1e35f0
-
SHA1
874cf0dc047847ba53706c144911a017608f26bb
-
SHA256
f260fe9759e51b60798bfdb7d54889d8b4c4851c89b7d5145cabf7dbc0f17e81
-
SHA512
9a8794e6c48e96ed80bf9da2f8fa0bc17185d602b8fc0db0984fb0dd0ae3b98cb354cc4a9e7d318e0d70274e1abec9d73d2ee24060d1e8a1aba3a46d9fbcf8f3
-
SSDEEP
1536:1LDKVGiXJCxRiKYwN8kxKfSFhaXxW4NEFyodlnUqJxxVfBd:1khZCxRiKYlRlI4NEFyAlUG1fL
Malware Config
Signatures
Files
-
f260fe9759e51b60798bfdb7d54889d8b4c4851c89b7d5145cabf7dbc0f17e81.exe windows x86
0b60d11276e553c2c9461bebbda7ca81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ConvertThreadToFiber
WinExec
GetConsoleCommandHistoryLengthA
ReadConsoleOutputAttribute
DisableThreadLibraryCalls
FreeEnvironmentStringsW
GetThreadTimes
GetComputerNameExA
GetConsoleKeyboardLayoutNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE