Static task
static1
Behavioral task
behavioral1
Sample
2e3c45d17c44831a636859d6ec91e160d8a94c13dbdeb456058fa2ea1e7dc352.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e3c45d17c44831a636859d6ec91e160d8a94c13dbdeb456058fa2ea1e7dc352.exe
Resource
win10v2004-20220901-en
General
-
Target
2e3c45d17c44831a636859d6ec91e160d8a94c13dbdeb456058fa2ea1e7dc352
-
Size
59KB
-
MD5
0faf2778ff1102b220bb5df7539e2f51
-
SHA1
9e7305304a96aa8f296546c4bf30fbea6e0d890e
-
SHA256
2e3c45d17c44831a636859d6ec91e160d8a94c13dbdeb456058fa2ea1e7dc352
-
SHA512
a70c56b3d38dbef8332aa71492d5b6d12fa55194fd6f79590813e6fd6ede61c51c60d050a87a1c1fb6f657702bb3d7ce3c36af7887f3e929d819b15bbe766327
-
SSDEEP
1536:FYpYGha+gSxUmQVqE/TrU08/sAUYFLbqzAmZ83h:GYGhkSCxN3U3PhezAuKh
Malware Config
Signatures
Files
-
2e3c45d17c44831a636859d6ec91e160d8a94c13dbdeb456058fa2ea1e7dc352.exe windows x86
355e2229510537eabb8887117342add6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
LocalHandle
GetFileSize
GetConsoleSelectionInfo
GetNumaAvailableMemory
CreateSocketHandle
UTUnRegister
DebugActiveProcessStop
lstrcatA
FindFirstChangeNotificationA
TrimVirtualBuffer
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE