Static task
static1
Behavioral task
behavioral1
Sample
795c1b8bb1fef13b67636ce3e9a5902ce64c07cc655c189751a51b5d714bd6e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
795c1b8bb1fef13b67636ce3e9a5902ce64c07cc655c189751a51b5d714bd6e5.exe
Resource
win10v2004-20220812-en
General
-
Target
795c1b8bb1fef13b67636ce3e9a5902ce64c07cc655c189751a51b5d714bd6e5
-
Size
76KB
-
MD5
39a5749ac100a4c7b21a20cc94b35eb2
-
SHA1
7076bf9978c753d8850f04a8a1824ab76468781f
-
SHA256
795c1b8bb1fef13b67636ce3e9a5902ce64c07cc655c189751a51b5d714bd6e5
-
SHA512
28ecec603c04f5175b26d258da85593f6b4a1eb9029ccb26709aab05c2f8263a037125f9dfc6b8c46ddae01a5b5a0ab33131b5ac187605a1034e758ca7ff4c8a
-
SSDEEP
1536:F8DC2U74DhE7WGZs4NVZfwgUM2A9Wz9r4IQ/zp482hW8fPL9:F8+2+4NINB7wgUMliQe8vYL9
Malware Config
Signatures
Files
-
795c1b8bb1fef13b67636ce3e9a5902ce64c07cc655c189751a51b5d714bd6e5.exe windows x86
33694eef8b39bf18961db2764c1b5e1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetNumaAvailableMemoryNode
InterlockedDecrement
SetLocaleInfoW
GetCurrentProcess
DebugActiveProcessStop
DecodeSystemPointer
VirtualAlloc
OpenEventA
HeapFree
ExpungeConsoleCommandHistoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE