Static task
static1
Behavioral task
behavioral1
Sample
1bd7884b5d3cb3230c836f58cdbf4257c2d7df76aead644cffad0f1529935126.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bd7884b5d3cb3230c836f58cdbf4257c2d7df76aead644cffad0f1529935126.exe
Resource
win10v2004-20220812-en
General
-
Target
1bd7884b5d3cb3230c836f58cdbf4257c2d7df76aead644cffad0f1529935126
-
Size
320KB
-
MD5
a3b91e039616207301aa9651b990fe40
-
SHA1
271b3637e0e5311069ceb3ac7fa81122b6029c25
-
SHA256
1bd7884b5d3cb3230c836f58cdbf4257c2d7df76aead644cffad0f1529935126
-
SHA512
7ccef69fc4eed7ec1c2f0466d0ed92614d837b96924061cfaa72fdc49bd7f487c2b44a1f72f09a841a43d77f170320523ee0a5c4c82c3ad780374a3ca5e9d6ac
-
SSDEEP
6144:GKqwc11ZsM9yBsH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Gz1f3yU2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
1bd7884b5d3cb3230c836f58cdbf4257c2d7df76aead644cffad0f1529935126.exe windows x86
0a54ef11845d36a592041d1bdabc44a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesExA
FindNextVolumeMountPointW
AttachConsole
FindFirstVolumeMountPointW
_hwrite
CancelTimerQueueTimer
WriteTapemark
GetConsoleHardwareState
CopyFileW
GetConsoleWindow
CreateRemoteThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE