Static task
static1
Behavioral task
behavioral1
Sample
f3f52e95f935740b7fb66890966c754ae1e4bf0175c18a605054a5a39566478b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3f52e95f935740b7fb66890966c754ae1e4bf0175c18a605054a5a39566478b.exe
Resource
win10v2004-20221111-en
General
-
Target
f3f52e95f935740b7fb66890966c754ae1e4bf0175c18a605054a5a39566478b
-
Size
66KB
-
MD5
a9a0aa9d0a087e07bae01eda6ccba13d
-
SHA1
e4c1c8eaa81e6c1ccf5881f45173e3fa9cb9012d
-
SHA256
f3f52e95f935740b7fb66890966c754ae1e4bf0175c18a605054a5a39566478b
-
SHA512
fb57c36865ffd69b5f6c255610ed39cf626d1fdbca8dd15b30ca69d7ba121462f1df70c9ad92859591155c36332db17a7a903728a21d779304d4d0cc974355cf
-
SSDEEP
1536:fXMaL/Ja4dxYbh4HvfoNfFpU/xW3waibjxURGiIqJxxVfBd:XLhDdxYKPfoN720AaiZwIG1fL
Malware Config
Signatures
Files
-
f3f52e95f935740b7fb66890966c754ae1e4bf0175c18a605054a5a39566478b.exe windows x86
574300d468a317bdfcd790b1720adc8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
LZClose
ReplaceFileA
FreeLibrary
TransmitCommChar
Module32NextW
ZombifyActCtx
CreateWaitableTimerA
EnumLanguageGroupLocalesW
GetConsoleFontInfo
_hwrite
PeekNamedPipe
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE