Static task
static1
Behavioral task
behavioral1
Sample
4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe
Resource
win10v2004-20221111-en
General
-
Target
4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50
-
Size
92KB
-
MD5
8dffcbec6ed45285cb8d1af3efd5ff7d
-
SHA1
66c931b3c71fa9bd355077ff3cf2371d9941b803
-
SHA256
4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50
-
SHA512
0611eb7edc71de82f6c6cfac7bea8149aef622bc50389624054c1332ac1a34d6020e3308a2f45d0d26999f17c0dc6faf0f3e3d5762c9a076c2fdbd20dddb8a6f
-
SSDEEP
1536:bdmSEZ/2VeMxuu6EUbXNachU31VEFjEErxTWDTMqhGKYIZTET8u5j65UlFWh8IUK:QzZixuuMfU3bEFjBkMqhGKZTbuwgWW
Malware Config
Signatures
Files
-
4222a1901fd721d529487f1787eeda8cd485cc82dcb083e1b4c410d437071d50.exe windows x86
c26c5fe664cb55ba1de629b4233fd41b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterA
CreateJobObjectW
HeapWalk
ReadConsoleOutputCharacterW
FindNextVolumeMountPointW
CreateNamedPipeA
FlushFileBuffers
GetNamedPipeInfo
GetNamedPipeHandleStateW
GetProcessId
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 26KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE