Static task
static1
Behavioral task
behavioral1
Sample
801d8c9268b674434047493d5b55b43ca3782d0c1e89d83760a9d02aca8f7882.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
801d8c9268b674434047493d5b55b43ca3782d0c1e89d83760a9d02aca8f7882.exe
Resource
win10v2004-20220901-en
General
-
Target
801d8c9268b674434047493d5b55b43ca3782d0c1e89d83760a9d02aca8f7882
-
Size
71KB
-
MD5
09f8656a25dce3de35a8f7c5dfe0ae4d
-
SHA1
bf995123b0256175e96b92e5779bbd33a1d9b878
-
SHA256
801d8c9268b674434047493d5b55b43ca3782d0c1e89d83760a9d02aca8f7882
-
SHA512
991ea8083c8b989d05a933a8dc9314d814b118234482370c5e4fdfc422db6644743901771a0d04cd532b933426d1ad4809ace142649fb317136c8f64170f4817
-
SSDEEP
1536:CJ2stRSvXQoKV9AxSCd9XgHwrGs80TLXGXN/LB2yeo93zDJpJiMHo9LEzkAb:CoqSvXQtV+l96wrG30TLXGX9B2yz9DD5
Malware Config
Signatures
Files
-
801d8c9268b674434047493d5b55b43ca3782d0c1e89d83760a9d02aca8f7882.exe windows x86
8ac1cbcedc537863b71006db33d3d4cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileIntW
FindFirstVolumeA
SetCommTimeouts
CloseHandle
ExitThread
UnmapViewOfFile
GlobalAlloc
FindNextVolumeW
ClearCommError
SetProcessAffinityMask
GetConsoleAliasesW
GetBinaryTypeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE