Static task
static1
Behavioral task
behavioral1
Sample
a475df133a0c7537006ec0ae8d2d54a232e6c5768017bfc5854fb32a306390db.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a475df133a0c7537006ec0ae8d2d54a232e6c5768017bfc5854fb32a306390db.exe
Resource
win10v2004-20220812-en
General
-
Target
a475df133a0c7537006ec0ae8d2d54a232e6c5768017bfc5854fb32a306390db
-
Size
91KB
-
MD5
437647beba155565f7cdc2ed601fb4c3
-
SHA1
87e19781742be79780796c8b370615b080101756
-
SHA256
a475df133a0c7537006ec0ae8d2d54a232e6c5768017bfc5854fb32a306390db
-
SHA512
76bf8f858298c70c8110fbbf56d8dfcd3575e98dfcc330821c5815fe663e2392d208379c963ff260934c03fe510308023d88104427de523624a3968b4a75ef84
-
SSDEEP
1536:T4mkBewIVKEVygkdZvd4/yCjqZpU2j01O0wJgzxDaUo6Qboyc6CkcsNcWMJAXTwH:T48CitkD01O0q+xuUorVNcWMJAXTwt8x
Malware Config
Signatures
Files
-
a475df133a0c7537006ec0ae8d2d54a232e6c5768017bfc5854fb32a306390db.exe windows x86
358c71ac824a343eaddca1381792ac1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapWalk
FatalAppExitW
GetVolumeNameForVolumeMountPointW
IsValidLanguageGroup
BaseCheckAppcompatCache
GetCompressedFileSizeA
UnlockFileEx
GetConsoleTitleA
SleepEx
PrivCopyFileExW
DeviceIoControl
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE