Static task
static1
Behavioral task
behavioral1
Sample
2dcb0b1ade725b85acb696740c70fd4665724a920b2f12a6718d76b15aedbcf6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2dcb0b1ade725b85acb696740c70fd4665724a920b2f12a6718d76b15aedbcf6.exe
Resource
win10v2004-20220812-en
General
-
Target
2dcb0b1ade725b85acb696740c70fd4665724a920b2f12a6718d76b15aedbcf6
-
Size
284KB
-
MD5
21c02728d8f46dcb97af6c4ce6f7a030
-
SHA1
90e0eba7c876eb8548cc1f00703d180dea6744cb
-
SHA256
2dcb0b1ade725b85acb696740c70fd4665724a920b2f12a6718d76b15aedbcf6
-
SHA512
d274938f5d4c4197ff7901fce8044fc5bb31db4a319158faf97b47f148a71fb9979d9b1848b76fb2797685245931fcd3e22288f07d831d77684829ac4053df31
-
SSDEEP
6144:GxSlTeKw5DJA3adRZLGTbx+v2Fu/v7xbC2W032zLbLzUD0XlKy/Ulr/:GWT69JA4vKTbkDxCnbLM01KV/
Malware Config
Signatures
Files
-
2dcb0b1ade725b85acb696740c70fd4665724a920b2f12a6718d76b15aedbcf6.exe windows x86
8d7684a8a25a4f1d34417a281c070bb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
fmifs
DiskCopy
EnableVolumeCompression
Extend
ComputeFmMediaType
Chkdsk
Format
FormatEx
kernel32
GetSystemTimeAsFileTime
GetOEMCP
LoadLibraryA
HeapAlloc
SetUnhandledExceptionFilter
GetProcessHeap
GetCurrentProcessId
WideCharToMultiByte
GetTickCount
CreateFileA
FindResourceW
GetCurrentProcess
GetLocalTime
SystemTimeToFileTime
CloseHandle
lstrcmpA
lstrlenW
SetLastError
MultiByteToWideChar
lstrcpyW
GetLocaleInfoW
QueryPerformanceCounter
HeapFree
w32topl
ToplSTHeapInit
ToplScheduleExportReadonly
ToplSTHeapExtractMin
ToplScheduleCacheDestroy
ToplScheduleDuration
ToplScheduleCreate
ToplSTHeapDestroy
ToplScheduleCacheCreate
Sections
.text Size: 276KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ