Static task
static1
Behavioral task
behavioral1
Sample
03bf38daafde2ed5a69556451f8226ad81504ae9b4076429266db49f3dbd17db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
03bf38daafde2ed5a69556451f8226ad81504ae9b4076429266db49f3dbd17db.exe
Resource
win10v2004-20220812-en
General
-
Target
03bf38daafde2ed5a69556451f8226ad81504ae9b4076429266db49f3dbd17db
-
Size
320KB
-
MD5
a2e9f2f2e4d736658e0124d7934e21e0
-
SHA1
592256c6c3033acc62e194e5336c02248dd2c818
-
SHA256
03bf38daafde2ed5a69556451f8226ad81504ae9b4076429266db49f3dbd17db
-
SHA512
92876104a72d46f4c67f42f9bfa8c95393af3efaa96c9945ec53746e8e96e529f69d7472bedd330275895ba92d81080e4de235c298f4e7f51d93eeef87409b73
-
SSDEEP
6144:fQog6OrrTYH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:06d2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
03bf38daafde2ed5a69556451f8226ad81504ae9b4076429266db49f3dbd17db.exe windows x86
e9bde609ae48cae50f384651051f3c65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushViewOfFile
GetPrivateProfileStructW
CreateFiber
GetPrivateProfileStringA
Module32FirstW
CloseConsoleHandle
EnumTimeFormatsW
GetConsoleWindow
GetThreadIOPendingFlag
BeginUpdateResourceW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE