Static task
static1
Behavioral task
behavioral1
Sample
f20bb2564bff07f9cc7821988e2bbe3b7cf65f31793d68267d07c2908594c464.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f20bb2564bff07f9cc7821988e2bbe3b7cf65f31793d68267d07c2908594c464.exe
Resource
win10v2004-20220812-en
General
-
Target
f20bb2564bff07f9cc7821988e2bbe3b7cf65f31793d68267d07c2908594c464
-
Size
76KB
-
MD5
311668bf7203a78b47035219498c63cb
-
SHA1
1021b30862060cc136bcd83e997d8668c2da9c0d
-
SHA256
f20bb2564bff07f9cc7821988e2bbe3b7cf65f31793d68267d07c2908594c464
-
SHA512
af2004d73c2124ba42b68c09bdf21419c9d6242af73570eb0854f55155636e2f9769afb04b55b8622d6e0da601e99924e1884481c19e47157525f9e67b40655b
-
SSDEEP
1536:JYsTHisjwo2ZrDgHAzWhavDVLTIxpwVxLpjVrs2ryrd1vUQuq6:xOE294AzW87V38+nLHs2qo
Malware Config
Signatures
Files
-
f20bb2564bff07f9cc7821988e2bbe3b7cf65f31793d68267d07c2908594c464.exe windows x86
21b2baa59dca0f6c469d7803294af35e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FreeLibrary
ReleaseSemaphore
AttachConsole
InitializeCriticalSectionAndSpinCount
TlsFree
SetComPlusPackageInstallStatus
GlobalUnWire
GetPrivateProfileIntW
GetNumaProcessorMap
SetConsoleInputExeNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE