Static task
static1
Behavioral task
behavioral1
Sample
2ce5792d504fae3aec2f7e58c5da3de274210c58dbae821d40b0cf70e5a82dda.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2ce5792d504fae3aec2f7e58c5da3de274210c58dbae821d40b0cf70e5a82dda.exe
Resource
win10v2004-20220812-en
General
-
Target
2ce5792d504fae3aec2f7e58c5da3de274210c58dbae821d40b0cf70e5a82dda
-
Size
63KB
-
MD5
844407a90007516773c5f3ffaf3c2eeb
-
SHA1
bc8ee220e4ce90596feb0bf14ffab1ced08dc5b2
-
SHA256
2ce5792d504fae3aec2f7e58c5da3de274210c58dbae821d40b0cf70e5a82dda
-
SHA512
f41aae399057e683672bbd7277909b1b863cae01c6f8a49976e5748777e4b1ca68078ee053bc1ab736f01b5004723da58bbddd32c3cf6c9aabc4dd2a8c143000
-
SSDEEP
1536:a0O+GbvA9MV/R+POONc1T7cpdDSh5x3jN+KI:a03svA9ERb+c139+KI
Malware Config
Signatures
Files
-
2ce5792d504fae3aec2f7e58c5da3de274210c58dbae821d40b0cf70e5a82dda.exe windows x86
4918d292f871e6f0578195fc30d4b98c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomW
GetDiskFreeSpaceExA
Toolhelp32ReadProcessMemory
SuspendThread
SetupComm
FindResourceW
SetMailslotInfo
EnumDateFormatsA
EnumDateFormatsW
CreateVirtualBuffer
CopyLZFile
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE