Static task
static1
Behavioral task
behavioral1
Sample
c7a114e54e2ce52679d4939e9157cded41182dbe9f4972202e4aee52704ac598.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7a114e54e2ce52679d4939e9157cded41182dbe9f4972202e4aee52704ac598.exe
Resource
win10v2004-20220901-en
General
-
Target
c7a114e54e2ce52679d4939e9157cded41182dbe9f4972202e4aee52704ac598
-
Size
494KB
-
MD5
83f046f6f230a07eab101ed3331344f0
-
SHA1
96b3f91c5078aa888e5891b7ec6535f0f3549d9c
-
SHA256
c7a114e54e2ce52679d4939e9157cded41182dbe9f4972202e4aee52704ac598
-
SHA512
fe0bf74b3d024bdd4223e16579923d9ae3b677fa11f5e625147cda79ea08376b040387a25b1317e205ceed4d537659de3b88ec68a9ff2a31a169aa0c8974062b
-
SSDEEP
12288:gKd82tx6ZWoLX6sg8v4h3HMVt30pgz70B+YqykNuc:jhsxLXRY3sV67Fkl
Malware Config
Signatures
Files
-
c7a114e54e2ce52679d4939e9157cded41182dbe9f4972202e4aee52704ac598.exe windows x86
d5ccd621f854f597a4bbef55e440b75e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CredUnmarshalCredentialW
ntdll
RtlEqualPrefixSid
shell32
SHIsFileAvailableOffline
kernel32
GetCurrentProcess
GetConsoleWindow
Sections
.text Size: 487KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE