Static task
static1
Behavioral task
behavioral1
Sample
c1822ac5fc507a95e08161cc61b611096bcc09b16dab4a070d7af20191b3b8ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1822ac5fc507a95e08161cc61b611096bcc09b16dab4a070d7af20191b3b8ce.exe
Resource
win10v2004-20220901-en
General
-
Target
c1822ac5fc507a95e08161cc61b611096bcc09b16dab4a070d7af20191b3b8ce
-
Size
320KB
-
MD5
a31685c8747158eb70c070396add6b10
-
SHA1
285f7e51fb1dfdf84eadf88652679e59f4808dda
-
SHA256
c1822ac5fc507a95e08161cc61b611096bcc09b16dab4a070d7af20191b3b8ce
-
SHA512
73170b4b06774f345d8dce0b227eaffddacfeb6b0093185c17e3eab57e27ce0d7b781fd2a405a7a84893227606f203d42261d77031862e3bf082a202c9501a9e
-
SSDEEP
6144:Fo0kwYO7rOSH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:FTYaOQ2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
c1822ac5fc507a95e08161cc61b611096bcc09b16dab4a070d7af20191b3b8ce.exe windows x86
c42ebb08e199fa76f0f5f1b072ce150c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetComputerNameW
GetStartupInfoA
QueryDosDeviceW
LZRead
IsProcessorFeaturePresent
Process32Next
GetSystemTimeAsFileTime
ReadConsoleOutputAttribute
SetProcessPriorityBoost
GetCurrentProcessId
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE