Static task
static1
Behavioral task
behavioral1
Sample
999198ca159caa9a72bae23065ae9bd338ac808e828f5703b357475d3ff8cf3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
999198ca159caa9a72bae23065ae9bd338ac808e828f5703b357475d3ff8cf3b.exe
Resource
win10v2004-20220812-en
General
-
Target
999198ca159caa9a72bae23065ae9bd338ac808e828f5703b357475d3ff8cf3b
-
Size
320KB
-
MD5
125a8242d3a30d21e240473e7ade4140
-
SHA1
0d681e0aa4079655f8a15fba3631c89be8de7870
-
SHA256
999198ca159caa9a72bae23065ae9bd338ac808e828f5703b357475d3ff8cf3b
-
SHA512
d0208127c9f40540b40b14f317331f80b96e8583ab19dd5854cbf31a5040b691537cdce8743b79debd570135aec0272891ca6c02295bbe40222f1318533687c0
-
SSDEEP
6144:OM/P2PeIH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:/mP52EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
999198ca159caa9a72bae23065ae9bd338ac808e828f5703b357475d3ff8cf3b.exe windows x86
a20f6e03ce9d65a5bf5ac398179500c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
GetConsoleCommandHistoryA
CloseHandle
lstrcmpW
GetEnvironmentStringsW
GetVolumeNameForVolumeMountPointA
FlushViewOfFile
lstrcpyA
GetUserDefaultLangID
VirtualQuery
GlobalCompact
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE