Static task
static1
Behavioral task
behavioral1
Sample
134d829c6395dd46b7d902094e7a6b31e4766d00e0894e30023492438b6f99bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
134d829c6395dd46b7d902094e7a6b31e4766d00e0894e30023492438b6f99bc.exe
Resource
win10v2004-20220812-en
General
-
Target
134d829c6395dd46b7d902094e7a6b31e4766d00e0894e30023492438b6f99bc
-
Size
320KB
-
MD5
84d374dbb542c224b3a85e716ca1e450
-
SHA1
c395cec902b8bc8a6dca1f2148ded8d127ad6108
-
SHA256
134d829c6395dd46b7d902094e7a6b31e4766d00e0894e30023492438b6f99bc
-
SHA512
273378b7571efd4130771df7c9e2ccef935ee798715528808b969796db4906414c1a3f4ddbd9d109762db92916396b25ac2ac12691cb1bf72e41ba48ee4f9d5f
-
SSDEEP
6144:mFMqZQ4H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:mFwu2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
134d829c6395dd46b7d902094e7a6b31e4766d00e0894e30023492438b6f99bc.exe windows x86
4d6a4ec606f6597085eebcb229e591de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventW
GetDiskFreeSpaceW
LZInit
Sleep
GetFileType
ReleaseActCtx
GetProcessShutdownParameters
HeapReAlloc
SetFileApisToOEM
EnumResourceTypesW
LeaveCriticalSection
GetCPFileNameFromRegistry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE