Static task
static1
Behavioral task
behavioral1
Sample
20c35aef2209275b1a6cdf086cbb1a446cc8cc902b29b571c081054a07f63d3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20c35aef2209275b1a6cdf086cbb1a446cc8cc902b29b571c081054a07f63d3d.exe
Resource
win10v2004-20220812-en
General
-
Target
20c35aef2209275b1a6cdf086cbb1a446cc8cc902b29b571c081054a07f63d3d
-
Size
816KB
-
MD5
830447597410abf9cf04f319fe2c2130
-
SHA1
05e45db49d9dee4b1c9ff45775c822e2e86f5d4b
-
SHA256
20c35aef2209275b1a6cdf086cbb1a446cc8cc902b29b571c081054a07f63d3d
-
SHA512
53df17ce9d776672ae44165a83eefc9eef71a8ff38ef6b3183530ea2ab429cea78348f4f69e7ebda084d3d997761ae416cec5134b555911491a78dd9803c73b4
-
SSDEEP
12288:67VSn/QhFdoCteeyWa+SaOMJ9F6VCBNIpW5BUySEdppWdy3w6jspTs:6BSn/m3o2qWyaOm+W5BUKrpF/jsO
Malware Config
Signatures
Files
-
20c35aef2209275b1a6cdf086cbb1a446cc8cc902b29b571c081054a07f63d3d.exe windows x86
caa036fbc8c02412d81bad73733b4717
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumePathNameW
LoadLibraryA
GetFileTime
GetLastError
GetLastError
GetLastError
GetVolumeInformationW
MoveFileA
GetLastError
GetLastError
OpenMutexW
VirtualAlloc
lstrlenA
OpenSemaphoreW
GetCurrentDirectoryW
GetLastError
GetLastError
netshell
HrRenameConnection
HrGetIconFromMediaType
HrCreateDesktopIcon
HrLaunchConnection
Sections
.play Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE