Static task
static1
Behavioral task
behavioral1
Sample
18158762dca1fba64f26d8576d34c58519105a09b95c76a63940c0d93667d04b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
18158762dca1fba64f26d8576d34c58519105a09b95c76a63940c0d93667d04b.exe
Resource
win10v2004-20220812-en
General
-
Target
18158762dca1fba64f26d8576d34c58519105a09b95c76a63940c0d93667d04b
-
Size
320KB
-
MD5
0b6ba86abc7bb46163413db65fbc4040
-
SHA1
d0499f2f6c741b2079539fc55fb813486e0070eb
-
SHA256
18158762dca1fba64f26d8576d34c58519105a09b95c76a63940c0d93667d04b
-
SHA512
4031350be2f6ba1c7c0e21b54a3bd252f0e18f47f0b132d2b9944c6dddd4a467b33cb182bec82a75ac936a0b60064a3c34cf9bf6f4d1b77c714d8d30a497d080
-
SSDEEP
6144:UEEEHtr0wU9D8WYH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:UEEEHrUDg2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
18158762dca1fba64f26d8576d34c58519105a09b95c76a63940c0d93667d04b.exe windows x86
7c649f0e33c0b327686f18da5b4a633e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextVolumeW
CopyFileExA
CreateHardLinkA
SetCommTimeouts
GetNamedPipeHandleStateA
GetThreadLocale
LocalReAlloc
GetComputerNameA
GetConsoleCursorMode
CreateDirectoryA
WritePrivateProfileStructW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE