Static task
static1
Behavioral task
behavioral1
Sample
f3fef6876c6b88a280a5b6163a77736e68918a9ef35782c4663158fde97afb66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3fef6876c6b88a280a5b6163a77736e68918a9ef35782c4663158fde97afb66.exe
Resource
win10v2004-20221111-en
General
-
Target
f3fef6876c6b88a280a5b6163a77736e68918a9ef35782c4663158fde97afb66
-
Size
63KB
-
MD5
446125e165d77752ad0358d340a7f986
-
SHA1
721cd563c4d26e552551d6769e1bfb2e6463b256
-
SHA256
f3fef6876c6b88a280a5b6163a77736e68918a9ef35782c4663158fde97afb66
-
SHA512
1542f4395f2663fb8032329e6539faf46076040ffbc1c35af91078725138b2a1c4eeaad2656304459694bd85fdb91fc67ade4f9e785074578df9b25a483d13fa
-
SSDEEP
1536:6+xc+k+nh46q6wBo9zR9ECTUjhiV+11rRVomy1hVict5f:6iTxnh9UBIrTUtiV+7t6m1Kf
Malware Config
Signatures
Files
-
f3fef6876c6b88a280a5b6163a77736e68918a9ef35782c4663158fde97afb66.exe windows x86
a74523d623952f4989cc7db3a30ec1c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadExecutionState
SetEnvironmentVariableW
InitAtomTable
CreateMailslotA
SetInformationJobObject
GetProcessAffinityMask
LocalReAlloc
ExpandEnvironmentStringsW
GetNamedPipeInfo
FindActCtxSectionGuid
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE