Static task
static1
Behavioral task
behavioral1
Sample
f580856ba7f39e74e97855bb88758b1b22fe9b07d280854071173eb5fcf4e4bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f580856ba7f39e74e97855bb88758b1b22fe9b07d280854071173eb5fcf4e4bb.exe
Resource
win10v2004-20220812-en
General
-
Target
f580856ba7f39e74e97855bb88758b1b22fe9b07d280854071173eb5fcf4e4bb
-
Size
33KB
-
MD5
0e899a71ffb2125375e59b8de92a2445
-
SHA1
0922bf2fb6501d807959c546375deb818b75563a
-
SHA256
f580856ba7f39e74e97855bb88758b1b22fe9b07d280854071173eb5fcf4e4bb
-
SHA512
f85e605ab112cf057523cb4a63d73599402a50efe41b3ee3fd738ad2266aee2ae7cb1d87ebb31d78c54c542a6868799dfee6cea3da36bcbc09a8aca903593f00
-
SSDEEP
768:IV7h6CHp4EiD4Z90u+eear3IHXBHctMCCw0vbnwz/B9D7MBI+FeJ3:InsnuPZIx8tMhw2q/vAO+M
Malware Config
Signatures
Files
-
f580856ba7f39e74e97855bb88758b1b22fe9b07d280854071173eb5fcf4e4bb.exe windows x86
f32bd979c0dd7c4dc85e35e42a56a60e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
LockFileEx
LoadModule
SuspendThread
DosDateTimeToFileTime
CreateEventA
AddConsoleAliasA
PrivMoveFileIdentityW
SetProcessWorkingSetSize
SetThreadContext
TlsFree
GetExitCodeThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE