Static task
static1
Behavioral task
behavioral1
Sample
f96c81910b372d57757493347c615c29f1312d06ee669ace4e87c0f2fe53e540.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f96c81910b372d57757493347c615c29f1312d06ee669ace4e87c0f2fe53e540.exe
Resource
win10v2004-20220812-en
General
-
Target
f96c81910b372d57757493347c615c29f1312d06ee669ace4e87c0f2fe53e540
-
Size
432KB
-
MD5
849cef9a86c013222f02cb84f683a9a0
-
SHA1
9b2a9481f18b939c4430c731540c622b63cbedb3
-
SHA256
f96c81910b372d57757493347c615c29f1312d06ee669ace4e87c0f2fe53e540
-
SHA512
eeb45b82fdad8fb7167c3dc0ff4b8d9c73c37063fb7b86042288b43d5e4b2c2aaf091df171a97363bb03ff6c00b84fff6136066490e07e010017abba804c8503
-
SSDEEP
12288:W7PJ2fmlz3B0KpFtIcCa34m0tNXKU79qY5:WEfcN0qiPpm6tKQ
Malware Config
Signatures
Files
-
f96c81910b372d57757493347c615c29f1312d06ee669ace4e87c0f2fe53e540.exe windows x86
58c142564013fcaecb8d3b3f8fecc522
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtIsSystemResumeAutomatic
kernel32
GetEnvironmentVariableA
GetSystemDefaultLCID
AllocConsole
advapi32
ElfChangeNotify
user32
GetClipboardSequenceNumber
GetKBCodePage
Sections
.text Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE