Static task
static1
Behavioral task
behavioral1
Sample
79b8500927dbea384c5e5c134d1ff8e46a5544f392853ae8ad8c43f4ad95527d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79b8500927dbea384c5e5c134d1ff8e46a5544f392853ae8ad8c43f4ad95527d.exe
Resource
win10v2004-20220812-en
General
-
Target
79b8500927dbea384c5e5c134d1ff8e46a5544f392853ae8ad8c43f4ad95527d
-
Size
80KB
-
MD5
0349696206e28e94edd6e6a290604b75
-
SHA1
badd0132ac2d6fe78bf120f87e3cfdb80053b39a
-
SHA256
79b8500927dbea384c5e5c134d1ff8e46a5544f392853ae8ad8c43f4ad95527d
-
SHA512
d9291f34a10417776e9246e65330499f1d8c93d77624b968c938794b1733a1088d8fbc29605887db61f7dc8fb7d7ebeae38ddc5c2e83ddb049ab75d93a879459
-
SSDEEP
1536:J5uG5EFPaxM5yJ/dlXX5chZu4pnXItjKh82hW8fPL:7J50c155Sx9XIoh8vYL
Malware Config
Signatures
Files
-
79b8500927dbea384c5e5c134d1ff8e46a5544f392853ae8ad8c43f4ad95527d.exe windows x86
e86d20ff60bce7b89a917a49dfb5a730
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleCursorInfo
OpenDataFile
DeleteAtom
BuildCommDCBA
PrivCopyFileExW
VirtualLock
RegisterWaitForInputIdle
TransmitCommChar
ScrollConsoleScreenBufferW
GlobalFindAtomA
BaseFlushAppcompatCache
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE