Static task
static1
Behavioral task
behavioral1
Sample
05fab633382a083d0dadb7e442a14c5aefce631c5701932f3c10c7375e2c90fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05fab633382a083d0dadb7e442a14c5aefce631c5701932f3c10c7375e2c90fd.exe
Resource
win10v2004-20220812-en
General
-
Target
05fab633382a083d0dadb7e442a14c5aefce631c5701932f3c10c7375e2c90fd
-
Size
75KB
-
MD5
13105168b4462d95c036817838f8c4d2
-
SHA1
a1248beb87347bbc7327321335a9e333d659f53b
-
SHA256
05fab633382a083d0dadb7e442a14c5aefce631c5701932f3c10c7375e2c90fd
-
SHA512
2a76b917d3a4599acc9a157b34d6995989555c27aa62198e503a4b5565f690a74bfa2c7f8b4052e587edc749e99d546551c66e8537fad5fc718f832f55d3bbc0
-
SSDEEP
1536:z4K9nsmwIrZvKw0QltbkgFxvsoRDExxcGiVgjc/8k323z:8KBvKUkeeco4acb2j
Malware Config
Signatures
Files
-
05fab633382a083d0dadb7e442a14c5aefce631c5701932f3c10c7375e2c90fd.exe windows x86
f1d51aae0af9d5d2199d5f8fc98f2cc8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SignalObjectAndWait
DnsHostnameToComputerNameA
InterlockedPopEntrySList
CancelIo
GetVersionExW
VirtualLock
AddAtomW
SetConsoleCP
SetCommState
GetCommandLineW
GetOEMCP
BaseFlushAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE