Static task
static1
Behavioral task
behavioral1
Sample
329d252e4c071c10e041b96b85471de0fe0daab25198b119b31c8c9e876ccbb6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
329d252e4c071c10e041b96b85471de0fe0daab25198b119b31c8c9e876ccbb6.exe
Resource
win10v2004-20220812-en
General
-
Target
329d252e4c071c10e041b96b85471de0fe0daab25198b119b31c8c9e876ccbb6
-
Size
200KB
-
MD5
0ea3b46fe81a4542c4bbd8dca43fb66e
-
SHA1
9162c8552115fb87d5b3643213e8dcb345f6ba93
-
SHA256
329d252e4c071c10e041b96b85471de0fe0daab25198b119b31c8c9e876ccbb6
-
SHA512
78e5b6d4c0f772bfbe55a832159340a4d7c90cf4532a3986e00cba69e9d19c9fc03a42e06dc1d4990f1fe21601bb7a3ebf1f516967dde50807c47019fe6ca7c1
-
SSDEEP
3072:Gw3MDXX4iGgQl4FVtqGGssW4BI9lC8Oq2726ZaaSW3tBFRVt4:GvE0OHpBGgA6YotBVG
Malware Config
Signatures
Files
-
329d252e4c071c10e041b96b85471de0fe0daab25198b119b31c8c9e876ccbb6.exe windows x86
69a41fc242d0d3a57ac4a5ebd9c51857
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadSelectorEntry
CreatePipe
VDMConsoleOperation
RegisterConsoleOS2
GetWindowsDirectoryW
SetConsoleCursor
DuplicateConsoleHandle
GlobalFlags
GetConsoleKeyboardLayoutNameA
GetDriveTypeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 58KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 22KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE