Static task
static1
Behavioral task
behavioral1
Sample
d75a70add48b4612e8ed6c398d35690b1b769d37725af454073256296d297422.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d75a70add48b4612e8ed6c398d35690b1b769d37725af454073256296d297422.exe
Resource
win10v2004-20220812-en
General
-
Target
d75a70add48b4612e8ed6c398d35690b1b769d37725af454073256296d297422
-
Size
56KB
-
MD5
1c06d69ba814f80f5c8c000e3398d5ed
-
SHA1
00ae6b92bb3e88f770e9e77ae318d30581a1ce31
-
SHA256
d75a70add48b4612e8ed6c398d35690b1b769d37725af454073256296d297422
-
SHA512
d8d2ae56ec910a3c96dfdee34e973ced93895285e008745c83fed8bb9e84af1bbb7ff34b3f01b5c9c7e2983cf15cee17fe7e4d87598d80e45a67d4a599d351a8
-
SSDEEP
768:DGWrTrPTSuKRLlH2r93h21n3Mu0JIqyEJd2eTq6QJISGpHvoDhTbEji2Yn/5JJBE:ZrzKUFQI3pwxtn5BoTSmKN3YBhF
Malware Config
Signatures
Files
-
d75a70add48b4612e8ed6c398d35690b1b769d37725af454073256296d297422.exe windows x86
f9a9866d76d1e9413a40b519f6b7f8e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VDMOperationStarted
FindAtomA
GetTickCount
GetFileSize
GetComputerNameA
WriteFile
Module32First
GetNumaNodeProcessorMask
ReadConsoleOutputCharacterW
GetConsoleCommandHistoryLengthA
BackupWrite
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE