Static task
static1
Behavioral task
behavioral1
Sample
f5775d30a0c311d9287c8c44d8a3609b609010f94f205a3a363a7b44c9a607f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5775d30a0c311d9287c8c44d8a3609b609010f94f205a3a363a7b44c9a607f8.exe
Resource
win10v2004-20220901-en
General
-
Target
f5775d30a0c311d9287c8c44d8a3609b609010f94f205a3a363a7b44c9a607f8
-
Size
320KB
-
MD5
a3a1a58c5676217fff67851478d11010
-
SHA1
6a14b37e0c934e570c43afb2aa5c02552b223d9a
-
SHA256
f5775d30a0c311d9287c8c44d8a3609b609010f94f205a3a363a7b44c9a607f8
-
SHA512
1e127d2dfc7d109509b6e78267022a2aff6ddf32df1dfd68d16e4ea98b49cfb296aa82f92263cea0b485cc962e491d129287a7f4c10fd7ba96ffa5b68db59400
-
SSDEEP
6144:kntVaH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:knA2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
f5775d30a0c311d9287c8c44d8a3609b609010f94f205a3a363a7b44c9a607f8.exe windows x86
4c20adc2dee18bbf4a0e26ef856f5155
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LZStart
DeleteFiber
UnregisterWaitEx
ChangeTimerQueueTimer
CreateJobObjectW
GetStringTypeExA
_lwrite
lstrcmpiW
DeleteAtom
LZClose
GetTapePosition
DnsHostnameToComputerNameA
GetCompressedFileSizeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE