Static task
static1
Behavioral task
behavioral1
Sample
20a92f5b3f00902511e271474e753f3cf4458996573909787b504b0c8db0088e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20a92f5b3f00902511e271474e753f3cf4458996573909787b504b0c8db0088e.exe
Resource
win10v2004-20221111-en
General
-
Target
20a92f5b3f00902511e271474e753f3cf4458996573909787b504b0c8db0088e
-
Size
446KB
-
MD5
3f5694ac56f395bdfb859d68fa8e8a70
-
SHA1
92c7c0fd2cdd6060cb09b2dc80732bd412684495
-
SHA256
20a92f5b3f00902511e271474e753f3cf4458996573909787b504b0c8db0088e
-
SHA512
f1dc6cf9be93f758f837bd1d53a150e790bd7b31a3f4482aa75cbb435e3456230390d0c827882d2476d895dcba31b1a176012aaa789121e6afd2029b483fc214
-
SSDEEP
12288:7z+r8mDhNVAzHnd+yJxRlppwA4COllP1pP:7zu1Ta9+YBpwA4COllNt
Malware Config
Signatures
Files
-
20a92f5b3f00902511e271474e753f3cf4458996573909787b504b0c8db0088e.exe windows x86
30794d4eb44421bac56c345595425a63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlInitializeCriticalSection
RtlQueryEnvironmentVariable_U
kernel32
GetSystemDefaultUILanguage
user32
GetProcessWindowStation
Sections
.text Size: 439KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE