Static task
static1
Behavioral task
behavioral1
Sample
72de216aac5c6113fc5eeba5101bb3a3bafa520a90bb76e66901f37c55240e30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72de216aac5c6113fc5eeba5101bb3a3bafa520a90bb76e66901f37c55240e30.exe
Resource
win10v2004-20220812-en
General
-
Target
72de216aac5c6113fc5eeba5101bb3a3bafa520a90bb76e66901f37c55240e30
-
Size
66KB
-
MD5
0cdec6b4a2c284c253e0239fb22de0e1
-
SHA1
1de2c93c29a7eb1c210b19b0963941d2a3dccb76
-
SHA256
72de216aac5c6113fc5eeba5101bb3a3bafa520a90bb76e66901f37c55240e30
-
SHA512
4fe782d80c70263629e42573d12cbb42f65f2feaa07455540fc4a0bdddfc83a20a26bf6e60c7ed00bb96bf9cfb7e0485475cbc9836c61034383a247a37016ab9
-
SSDEEP
1536:6E66Rbgaf60mhDeZPL5bDdUKDVYLY0X1mzMLW4LHPs9jQx83mKKk:6OjkleZPNbZVYLY0XmMLVLV2m+
Malware Config
Signatures
Files
-
72de216aac5c6113fc5eeba5101bb3a3bafa520a90bb76e66901f37c55240e30.exe windows x86
8c929104e729fc9a091e4201fc0236f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
CreateProcessInternalA
GetConsoleAliasExesW
FindResourceA
FindAtomW
BuildCommDCBA
GetConsoleAliasesW
GetProcessHandleCount
FindFirstFileW
InterlockedFlushSList
OpenProfileUserMapping
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE