Static task
static1
Behavioral task
behavioral1
Sample
2a8d8402aa3f4b1e13ed3605e2681bb6dc74b3e321075d1cf6e6224c9e7218be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2a8d8402aa3f4b1e13ed3605e2681bb6dc74b3e321075d1cf6e6224c9e7218be.exe
Resource
win10v2004-20220901-en
General
-
Target
2a8d8402aa3f4b1e13ed3605e2681bb6dc74b3e321075d1cf6e6224c9e7218be
-
Size
56KB
-
MD5
a05f520cb1ad25825293749f370b6de0
-
SHA1
84f4f418e2459e0f462d6a72295d8054fe58a44b
-
SHA256
2a8d8402aa3f4b1e13ed3605e2681bb6dc74b3e321075d1cf6e6224c9e7218be
-
SHA512
e3db2aea1c7eaddac96faefe117cdd32c8c3fc4773fee6464f2bcb6ffbb0ab60c6d959a67770eec64b09744322dc19c1a18528c99704a383c213a3ac49cbdde7
-
SSDEEP
1536:lnnnn6vH7STbzBHRKObF2UR/8Rkelg9jbW:W7STBs8F2a8xg9W
Malware Config
Signatures
Files
-
2a8d8402aa3f4b1e13ed3605e2681bb6dc74b3e321075d1cf6e6224c9e7218be.exe windows x86
6adaf0c6ea202d11113049579bd1f228
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFirmwareEnvironmentVariableW
GetProcAddress
DebugActiveProcessStop
SetConsoleOutputCP
DuplicateHandle
NumaVirtualQueryNode
AttachConsole
TermsrvAppInstallMode
ActivateActCtx
TlsFree
GetWindowsDirectoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE