Static task
static1
Behavioral task
behavioral1
Sample
0226f383c657184386f01641316bfc9e96560eda830d64ef0d70773d255eeb75.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0226f383c657184386f01641316bfc9e96560eda830d64ef0d70773d255eeb75.exe
Resource
win10v2004-20220812-en
General
-
Target
0226f383c657184386f01641316bfc9e96560eda830d64ef0d70773d255eeb75
-
Size
56KB
-
MD5
066699bd04875c97a09be614063d695d
-
SHA1
92ab5b57db349bd080c5c06ed5f457516d3bb9b4
-
SHA256
0226f383c657184386f01641316bfc9e96560eda830d64ef0d70773d255eeb75
-
SHA512
be043b7753c6ffc9f3dc76b1d003e3fd146f64784fc61a08b4c6f26a452b1f9327e5782b5d7a400f1380b3b1a2ea7b615de0a318090db58c83c0d9f234550688
-
SSDEEP
768:nKhmAWrqZOicgFszV026l953yzzhA93KnylgCrhOQOOOIaovTWxJYcYbnaTWuC67:Kf+1Sl7glA7sOOIaHYKw6cv+LNZ
Malware Config
Signatures
Files
-
0226f383c657184386f01641316bfc9e96560eda830d64ef0d70773d255eeb75.exe windows x86
1110cb5361f045442c2ab67a83c0d0b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntA
IsBadStringPtrA
EnumResourceNamesW
DeleteVolumeMountPointW
DeleteVolumeMountPointW
RegisterConsoleOS2
BaseInitAppcompatCacheSupport
SetConsoleHardwareState
SetProcessAffinityMask
DebugBreak
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE