Static task
static1
Behavioral task
behavioral1
Sample
41d823f810b22883bf9fdeb7f3ddfabd3d5426afa5ebd4580184db7db41dc940.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41d823f810b22883bf9fdeb7f3ddfabd3d5426afa5ebd4580184db7db41dc940.exe
Resource
win10v2004-20220812-en
General
-
Target
41d823f810b22883bf9fdeb7f3ddfabd3d5426afa5ebd4580184db7db41dc940
-
Size
320KB
-
MD5
a2e1d74600cc74eab86e12228ce4e760
-
SHA1
62f88916d9473d5b0b937088072f85e2fe802b98
-
SHA256
41d823f810b22883bf9fdeb7f3ddfabd3d5426afa5ebd4580184db7db41dc940
-
SHA512
5c99b15b8f39320489123d906b0d2642c077f6b4075a45df06f244c5a516c94f2146087a9a2dc6d32c126b8ef400b3de298a2955fb6a5a51222beb45dfe86083
-
SSDEEP
6144:Yu8rwupH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:D0wuh2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
41d823f810b22883bf9fdeb7f3ddfabd3d5426afa5ebd4580184db7db41dc940.exe windows x86
2aed3092434c459622b719c6d463d594
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
VerLanguageNameW
OpenJobObjectA
IsProcessorFeaturePresent
GetCurrentProcessId
GetDefaultCommConfigA
EncodeSystemPointer
SetDefaultCommConfigA
BackupSeek
IsSystemResumeAutomatic
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE