Static task
static1
Behavioral task
behavioral1
Sample
19b0ab4fcf540c8279671e392df99cab041e8677578a6e9915ebf900f0a24f22.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
19b0ab4fcf540c8279671e392df99cab041e8677578a6e9915ebf900f0a24f22.exe
Resource
win10v2004-20220812-en
General
-
Target
19b0ab4fcf540c8279671e392df99cab041e8677578a6e9915ebf900f0a24f22
-
Size
66KB
-
MD5
2f8b02694a30fa782741bf0501bb6567
-
SHA1
c99bc67daff95e5b907c413adf17e64a25459071
-
SHA256
19b0ab4fcf540c8279671e392df99cab041e8677578a6e9915ebf900f0a24f22
-
SHA512
c4144867193f3aaf8b0a487a6de54918b8cb1ab9275c477b4106d3fe23c383754721e2661c99b0ff5c995d5f04fbe846d0f4c9ac3fbac1e3a44e3524770b9218
-
SSDEEP
1536:frSjaDErsvLjbQD7rYq18idxQkKlKuznrvqJxxVfBd:fuCGKQnrY6Kz7rvG1fL
Malware Config
Signatures
Files
-
19b0ab4fcf540c8279671e392df99cab041e8677578a6e9915ebf900f0a24f22.exe windows x86
11165810260b0e2e368cb49023d35f35
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
lstrlenW
LockFile
GetVersionExA
GetNamedPipeHandleStateW
LZSeek
InvalidateConsoleDIBits
CancelDeviceWakeupRequest
AllocConsole
InterlockedIncrement
DefineDosDeviceA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE