Static task
static1
Behavioral task
behavioral1
Sample
811205f32e850b031795a645960dfb095a5fedabc33604fa071407bb8e8781f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
811205f32e850b031795a645960dfb095a5fedabc33604fa071407bb8e8781f7.exe
Resource
win10v2004-20220901-en
General
-
Target
811205f32e850b031795a645960dfb095a5fedabc33604fa071407bb8e8781f7
-
Size
66KB
-
MD5
0db73864cbdf3a207ac3430add8b5906
-
SHA1
070bacf28a543b7719c842d993977950cc750836
-
SHA256
811205f32e850b031795a645960dfb095a5fedabc33604fa071407bb8e8781f7
-
SHA512
5e6fa78172b75854520ac15b15da043e57822c42433f8c9c6c826f5c04255bafaf121618ef57c2824b92cf52f59a19980a9190bb405674dbdd504312a734a9c3
-
SSDEEP
1536:YqjaJaL948onJ5KiDXUvDF9WGUpD6Ia+uWn21CqJxxVfBd:YMaJK41JI2nGsDraTW21CG1fL
Malware Config
Signatures
Files
-
811205f32e850b031795a645960dfb095a5fedabc33604fa071407bb8e8781f7.exe windows x86
3bf8759f33ed385464a89851f348e5d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindActCtxSectionStringW
GlobalFree
GetSystemInfo
HeapValidate
MoveFileExW
PrivMoveFileIdentityW
SetNamedPipeHandleState
RegisterConsoleVDM
FindFirstFileExW
lstrcmpA
FreeEnvironmentStringsW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE