Static task
static1
Behavioral task
behavioral1
Sample
04579fdd048569623f121d6993c17469dae9082dac779ea52b8333a2bd9166e0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04579fdd048569623f121d6993c17469dae9082dac779ea52b8333a2bd9166e0.exe
Resource
win10v2004-20221111-en
General
-
Target
04579fdd048569623f121d6993c17469dae9082dac779ea52b8333a2bd9166e0
-
Size
76KB
-
MD5
ff5caca81e8e7c5d988fa4392e04de10
-
SHA1
3d04531504fa02c5208f5bcc6ab9edcfad337b35
-
SHA256
04579fdd048569623f121d6993c17469dae9082dac779ea52b8333a2bd9166e0
-
SHA512
9fc366d3bb8f93ac3771f5cd843ecc35ef91252011dcb4c296c13dbdf813cd89a199674f2927788b31862f5e7c9e8a81eba9ce1aeb697b17629e90fa55122ee4
-
SSDEEP
1536:m1KKK3QgA3EMNP6m1+RYAH/2IDUWWCIF1Bv8KLsbZQbtItS/pjVrs2ryrd1vUQuP:m1KKKu0rm1+gItWTF1BOy0S/Hs2qo
Malware Config
Signatures
Files
-
04579fdd048569623f121d6993c17469dae9082dac779ea52b8333a2bd9166e0.exe windows x86
27c4998799e982b11b8ebc2d28a8e9b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceW
GetPrivateProfileSectionNamesA
GetCurrentThreadId
SetThreadPriorityBoost
UTRegister
CopyLZFile
ExpandEnvironmentStringsW
CreatePipe
GetConsoleTitleW
InterlockedFlushSList
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE