Static task
static1
Behavioral task
behavioral1
Sample
36e58bf0305cce5958100ba7fceb82eb0d833ac9aa9899adba59dce5e5647dbc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
36e58bf0305cce5958100ba7fceb82eb0d833ac9aa9899adba59dce5e5647dbc.exe
Resource
win10v2004-20220901-en
General
-
Target
36e58bf0305cce5958100ba7fceb82eb0d833ac9aa9899adba59dce5e5647dbc
-
Size
111KB
-
MD5
7721c36be32ae4e3e3efa2d9c72e67f8
-
SHA1
048eafd70abd4ad7a2877b5a2b5373462bc4079b
-
SHA256
36e58bf0305cce5958100ba7fceb82eb0d833ac9aa9899adba59dce5e5647dbc
-
SHA512
2d947b0e0a149695f54088c56861560f845e266b7683f7f90fbb7a546208b54760c293285c1125f20894af26d00caf7bbcf9c39b3a4476c02adb7597d31a845a
-
SSDEEP
3072:Emb5gPOmgN1g7cyaZ6vS2S1VnzI0cxptdN67Df/F:EE+Pyg9acsjWp4ffN
Malware Config
Signatures
Files
-
36e58bf0305cce5958100ba7fceb82eb0d833ac9aa9899adba59dce5e5647dbc.exe windows x86
cd3ec9d6d1c64906ec28bb9d9a8950e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
NlsConvertIntegerToString
ResetWriteWatch
CmdBatNotification
BaseDumpAppcompatCache
OpenSemaphoreW
lstrlen
MoveFileWithProgressA
GetProcessShutdownParameters
HeapFree
SetFirmwareEnvironmentVariableA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 97KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cduupqo Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE