Static task
static1
Behavioral task
behavioral1
Sample
12579bf9f47038bbecbd729fde3150d4f185bc4185d5104a83896d7bd8e030e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
12579bf9f47038bbecbd729fde3150d4f185bc4185d5104a83896d7bd8e030e2.exe
Resource
win10v2004-20220812-en
General
-
Target
12579bf9f47038bbecbd729fde3150d4f185bc4185d5104a83896d7bd8e030e2
-
Size
320KB
-
MD5
a3a04d371e64285e46666f71e2256cd0
-
SHA1
916593485bb7bff07de6ff52e844d76aee4e9c12
-
SHA256
12579bf9f47038bbecbd729fde3150d4f185bc4185d5104a83896d7bd8e030e2
-
SHA512
7f5184e7b89f1ad210498a300ba361bb177d46232e806052419b33e5603991331f890ece9409e10572aa5c95636a1a47dee1e829c9f54b15f674e9325a666796
-
SSDEEP
6144:r9lztWquI4fK1hC0H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:r9JtWquICK2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
12579bf9f47038bbecbd729fde3150d4f185bc4185d5104a83896d7bd8e030e2.exe windows x86
7f9557a294c2c7481a71fd8456219196
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
GetNumberFormatA
GetNumaAvailableMemoryNode
Heap32ListNext
RtlCaptureStackBackTrace
GetVolumeNameForVolumeMountPointA
FindVolumeClose
IsBadHugeReadPtr
LZCopy
CreateMailslotW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE