Static task
static1
Behavioral task
behavioral1
Sample
7f134e6ca0e5638227912b2ddd2bb6226a11fd846b08bc110efb444b0f233587.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7f134e6ca0e5638227912b2ddd2bb6226a11fd846b08bc110efb444b0f233587.exe
Resource
win10v2004-20220901-en
General
-
Target
7f134e6ca0e5638227912b2ddd2bb6226a11fd846b08bc110efb444b0f233587
-
Size
75KB
-
MD5
655369d00738245304ee33b896efb4ff
-
SHA1
aed80626ead28468def22b2858cada1a2feca979
-
SHA256
7f134e6ca0e5638227912b2ddd2bb6226a11fd846b08bc110efb444b0f233587
-
SHA512
818a4525bbd80f27efc4f04eebafbd4889df38a32c0c4f320a5a263df93d707ade1724606c4307523bb6d751a751bad998300aabc92aa27f9ec235f2b6b35af9
-
SSDEEP
1536:EiBVE6ODI4o3QWj5P7mglEggLmMg76idlxmp64GkYQTrGzoYWKEX:1BD4o3rm0qu6G3mp64GErGzol
Malware Config
Signatures
Files
-
7f134e6ca0e5638227912b2ddd2bb6226a11fd846b08bc110efb444b0f233587.exe windows x86
6f97435e3f0fb82663ae9fb8f6c1202a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBAndTimeoutsW
lstrlenW
UnregisterConsoleIME
CreateRemoteThread
MapViewOfFile
ReplaceFile
FindFirstChangeNotificationA
HeapSize
GetLocaleInfoW
GetConsoleAliasesA
HeapUnlock
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE