Static task
static1
Behavioral task
behavioral1
Sample
34081306f8118f8f63ea5b997e437156f31d00b9b65af4252c35cdf6bb889ee2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
34081306f8118f8f63ea5b997e437156f31d00b9b65af4252c35cdf6bb889ee2.exe
Resource
win10v2004-20220812-en
General
-
Target
34081306f8118f8f63ea5b997e437156f31d00b9b65af4252c35cdf6bb889ee2
-
Size
320KB
-
MD5
84a049e2dffc44918edfd83ceb15c880
-
SHA1
68b41e2e979605e7abe4fbbf3d00764488749161
-
SHA256
34081306f8118f8f63ea5b997e437156f31d00b9b65af4252c35cdf6bb889ee2
-
SHA512
ac336774c68c08bc2137b54820cd7fef5091d4d61ad2cdf9a11af31e978bb691b01e924dab6919e0f3645e02b1ec249b9bbabba6a85c81c3534b924470c59eda
-
SSDEEP
6144:XzTt4i7ycOAH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Xzhf7mG2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
34081306f8118f8f63ea5b997e437156f31d00b9b65af4252c35cdf6bb889ee2.exe windows x86
d06b8ffcc37c6e41baac388656c2397b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalGetAtomNameW
BeginUpdateResourceA
SetCPGlobal
GetDevicePowerState
IsBadHugeReadPtr
GetCommandLineW
GlobalAddAtomW
ReadConsoleOutputW
DnsHostnameToComputerNameW
BaseProcessInitPostImport
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE