Static task
static1
Behavioral task
behavioral1
Sample
03ab49c2cca7c4ef5c9bedda6a20499e3d1ede7a13d323e97b2437cc50abece3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
03ab49c2cca7c4ef5c9bedda6a20499e3d1ede7a13d323e97b2437cc50abece3.exe
Resource
win10v2004-20220812-en
General
-
Target
03ab49c2cca7c4ef5c9bedda6a20499e3d1ede7a13d323e97b2437cc50abece3
-
Size
85KB
-
MD5
4374097a6ad8d3d177d75af5e9208be0
-
SHA1
110433ceffdbc6653acd4d09d373464683c9b987
-
SHA256
03ab49c2cca7c4ef5c9bedda6a20499e3d1ede7a13d323e97b2437cc50abece3
-
SHA512
bb1c009712ee5080a3b36ecd2e4446fb536ac78af91b27810ceba9d732e2fc2092d7c07f9cbe6ad595c1bc9d243072f7ebbd461a96d41b9cb12a2c721c91f3e3
-
SSDEEP
1536:ZZKngK/uzW11Q8KpJckTHmpTWHiyhZLsQH7J8+jEErxTWDTMqhGKYIZTET8PImzk:ZIgK/OW1bQyAmp5yhCM79jBkMqhGKZT
Malware Config
Signatures
Files
-
03ab49c2cca7c4ef5c9bedda6a20499e3d1ede7a13d323e97b2437cc50abece3.exe windows x86
f744a2d04eb2feec8141d04179f9e28d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushViewOfFile
GetConsoleCP
GetVolumePathNamesForVolumeNameA
InitializeSListHead
WriteProfileStringW
WriteProfileSectionW
GlobalAddAtomW
GlobalAddAtomA
CreateFiber
GetCommMask
CreateWaitableTimerW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 29KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE