Static task
static1
Behavioral task
behavioral1
Sample
12bce68e8dea95af5ca48fbd52fc99f6ce1210cd625cd31f1e56d04befd2e3e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12bce68e8dea95af5ca48fbd52fc99f6ce1210cd625cd31f1e56d04befd2e3e0.exe
Resource
win10v2004-20220812-en
General
-
Target
12bce68e8dea95af5ca48fbd52fc99f6ce1210cd625cd31f1e56d04befd2e3e0
-
Size
143KB
-
MD5
0b6ee468351121914cc2b0be515e324e
-
SHA1
2d47590c361eb6d3447153c02458438b7203341c
-
SHA256
12bce68e8dea95af5ca48fbd52fc99f6ce1210cd625cd31f1e56d04befd2e3e0
-
SHA512
cd59abef94b6b3706f9f44d857417bf5c9be9fda7c9cc25edb38870cb7eeb3af35a022966b94124f81cf3a3a6cd3930b9a84472f5f778fda34def8f3954e82be
-
SSDEEP
3072:NDMY/wKNbhkQq6vSoaDqQet5egUEOqgmg85dVH17L:RMmwgpa6QeSgMqgnIjZ
Malware Config
Signatures
Files
-
12bce68e8dea95af5ca48fbd52fc99f6ce1210cd625cd31f1e56d04befd2e3e0.exe windows x86
fbad195d1557d2a8e41d6cd7e68c392c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
GetTickCount
PrivCopyFileExW
GetProcessPriorityBoost
GetConsoleFontInfo
GetEnvironmentStrings
VirtualProtect
SetProcessWorkingSetSize
GetCompressedFileSizeA
GetUserGeoID
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE