Static task
static1
Behavioral task
behavioral1
Sample
a645d63fb3f98eee26d567899a78334072892366e2acf9c6d02a51fde78ba779.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a645d63fb3f98eee26d567899a78334072892366e2acf9c6d02a51fde78ba779.exe
Resource
win10v2004-20221111-en
General
-
Target
a645d63fb3f98eee26d567899a78334072892366e2acf9c6d02a51fde78ba779
-
Size
85KB
-
MD5
4f8054f2aefeab75c47b45cc1398b7ea
-
SHA1
ac7d2843a24421706251a6c60dcc020daaf286a6
-
SHA256
a645d63fb3f98eee26d567899a78334072892366e2acf9c6d02a51fde78ba779
-
SHA512
f844211146b0ff87bfa74eedb9335167ed58fad1135d044c014fd7dd81d44e2c44612b787e2a87e7dbe77cd9bfc90bf0f122f6348ccf571e0891b942bb8d1c1c
-
SSDEEP
1536:oUWCkHTzv9uXSMCFZ3SwCym5CrTloiidHxvk+Zi+lpLg2Q1+14CNf1BnJNP7dcM:oUczv9ueFZ3SzymoPloiCxvpLAA14CNx
Malware Config
Signatures
Files
-
a645d63fb3f98eee26d567899a78334072892366e2acf9c6d02a51fde78ba779.exe windows x86
d8461aa7d3d6de589d7d6337a4c6f0ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
SetTimeZoneInformation
UpdateResourceW
Module32NextW
IsValidCodePage
EnumCalendarInfoA
UnregisterWaitEx
CommConfigDialogW
GlobalReAlloc
GetConsoleNlsMode
lstrcmpW
QueryInformationJobObject
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xrdata Size: 29KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE