Static task
static1
Behavioral task
behavioral1
Sample
f28374d7733e624c006368469d079211e6066d38e8d9c1661f69e00bf916c2ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f28374d7733e624c006368469d079211e6066d38e8d9c1661f69e00bf916c2ef.exe
Resource
win10v2004-20220901-en
General
-
Target
f28374d7733e624c006368469d079211e6066d38e8d9c1661f69e00bf916c2ef
-
Size
91KB
-
MD5
2a726944bb6a65a8e79bfa7c1f974f35
-
SHA1
f8a24b6f2a361e87aa98f9ffaf00fcd6b1bf8bdd
-
SHA256
f28374d7733e624c006368469d079211e6066d38e8d9c1661f69e00bf916c2ef
-
SHA512
513c4f4ec99a34393073863b5a2ef7e86c886e4eb081ed25f9a08cc5f59d6507e3caf302e7e55efe4aec42d8b12346e38dccdb695e859be60701d6c69bcb41a1
-
SSDEEP
1536:ahV0n8XljIGDkoyLc2jtOPMb9Frgm4RbZZQZzkRn:A0ni0GDkosc2jtOPuB5gbZZQZS
Malware Config
Signatures
Files
-
f28374d7733e624c006368469d079211e6066d38e8d9c1661f69e00bf916c2ef.exe windows x86
3262dec77f522e8ce735229067d4e29b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
ReplaceFile
GetSystemRegistryQuota
CheckRemoteDebuggerPresent
GetFileAttributesW
GetConsoleFontInfo
FillConsoleOutputAttribute
ScrollConsoleScreenBufferW
TransmitCommChar
ReadConsoleA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE