Static task
static1
Behavioral task
behavioral1
Sample
b387c20fe6674ca2d2a4f17055012baa5a4e3c4be4efd98bf74bde77beeda979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b387c20fe6674ca2d2a4f17055012baa5a4e3c4be4efd98bf74bde77beeda979.exe
Resource
win10v2004-20221111-en
General
-
Target
b387c20fe6674ca2d2a4f17055012baa5a4e3c4be4efd98bf74bde77beeda979
-
Size
86KB
-
MD5
ad394c5947717eb457a2152f64154cfd
-
SHA1
dfb95f1c8ba8f32ef4cd3133aa7374785fc0eb3b
-
SHA256
b387c20fe6674ca2d2a4f17055012baa5a4e3c4be4efd98bf74bde77beeda979
-
SHA512
c635f668b5a311717719f8b00ba94a45f9897f3262f89a7684a4e19206bc3ac4d842d98c4928be367a1b1354a7e896b6e927d258efb0f959c0c149fc012ff698
-
SSDEEP
1536:LLQOvurLJiLluwWPVm98NPQuvA2Rtm/LWuTTCQFipjVrs2ryrd1vUQuqgmsZcJAD:LLLGrwpuwWNC8NPQuvA2KjTTCQFiHs2d
Malware Config
Signatures
Files
-
b387c20fe6674ca2d2a4f17055012baa5a4e3c4be4efd98bf74bde77beeda979.exe windows x86
cdcfdde327b6fdd511e89e4efd855cf4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeSListHead
RegisterWaitForSingleObjectEx
GetProfileSectionW
DnsHostnameToComputerNameW
SetCurrentDirectoryW
LockFileEx
UnlockFile
GetCurrentConsoleFont
DeleteFileW
GlobalFindAtomA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 29KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE