Static task
static1
Behavioral task
behavioral1
Sample
309ba2627554cc09493e8a0fa875847cdcf648918102cd3b8fb551fb90a63297.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
309ba2627554cc09493e8a0fa875847cdcf648918102cd3b8fb551fb90a63297.exe
Resource
win10v2004-20220812-en
General
-
Target
309ba2627554cc09493e8a0fa875847cdcf648918102cd3b8fb551fb90a63297
-
Size
320KB
-
MD5
939d99938462a89afc17d76fd27cf480
-
SHA1
907479b9ab577ffdc348a474da9cf22f9f490a77
-
SHA256
309ba2627554cc09493e8a0fa875847cdcf648918102cd3b8fb551fb90a63297
-
SHA512
83fe98516665fc20747e5042991e0c181a83b80c7fdff4495b8b04e06c94ba0d008d7d28173f96b6475588bb16c9668fc8e1adafa8bdff3528665962f7b81358
-
SSDEEP
6144:YcZ2cvsBH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:3ZTsJ2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
309ba2627554cc09493e8a0fa875847cdcf648918102cd3b8fb551fb90a63297.exe windows x86
f8a3db1a19d39c8bfc44a9dc42ebef75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputAttribute
CreateEventW
RemoveDirectoryA
GetEnvironmentStringsW
GetNumberFormatW
PeekConsoleInputW
GetVolumeNameForVolumeMountPointW
lstrcpyA
GetHandleContext
GetFileType
SystemTimeToTzSpecificLocalTime
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE