Static task
static1
Behavioral task
behavioral1
Sample
5c56741c957f01513a61936f56453c5604ede5d2b1b1d49cdbb8ac8b31048901.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c56741c957f01513a61936f56453c5604ede5d2b1b1d49cdbb8ac8b31048901.exe
Resource
win10v2004-20220901-en
General
-
Target
5c56741c957f01513a61936f56453c5604ede5d2b1b1d49cdbb8ac8b31048901
-
Size
66KB
-
MD5
04bb447c0b0d7b59598bda6f76e41b11
-
SHA1
c0a88d1e4ccdfab5826b510a6374ade89d09134c
-
SHA256
5c56741c957f01513a61936f56453c5604ede5d2b1b1d49cdbb8ac8b31048901
-
SHA512
31340b6b4fa2c89d0af5aece1cd67be377fd83707818015af2e5aa5aa654f859094ea0529d7a1f577ff371c35a8c64c07fc6f5e51de519d96917d806b8baeebd
-
SSDEEP
1536:5MneRkTp7SdhyNblE0e8aeomWqp0zV0Roy6x2aHuvvK:lRcR1lEd8aeokF+6K
Malware Config
Signatures
Files
-
5c56741c957f01513a61936f56453c5604ede5d2b1b1d49cdbb8ac8b31048901.exe windows x86
a7a5df238eaeba36401df3b3e6ce51de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaAvailableMemory
UpdateResourceA
WriteConsoleA
SetTapeParameters
GetFileAttributesA
CreatePipe
GetNumaNodeProcessorMask
RestoreLastError
GetLongPathNameA
DisableThreadLibraryCalls
GetConsoleCommandHistoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE