Static task
static1
Behavioral task
behavioral1
Sample
b51485d6c750cae42908e87c2615bd80f3a3548a3cd32d731bb70a66af63378f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b51485d6c750cae42908e87c2615bd80f3a3548a3cd32d731bb70a66af63378f.exe
Resource
win10v2004-20221111-en
General
-
Target
b51485d6c750cae42908e87c2615bd80f3a3548a3cd32d731bb70a66af63378f
-
Size
119KB
-
MD5
10b84d1af5c69e03c914492c8cd29c0d
-
SHA1
bdb5cde02e3880553df3c22eae0ece524cda1215
-
SHA256
b51485d6c750cae42908e87c2615bd80f3a3548a3cd32d731bb70a66af63378f
-
SHA512
e4fbc885f4cfba41b0137f049064ec931cb9860bb1ae3cc9cc5610f041984ef71db327cef873b785502e39996fc69b17d3ebb38b22c45ec263d8befa2ad9df0c
-
SSDEEP
1536:GGpJ4zl7cSiO7ZVrqZE8F71TLg29329r29B3ApjVrs2ryrd1vUQuqSSqK5tnCvv:hP4zlgnOdr8F72FrC3AHs2qxnC
Malware Config
Signatures
Files
-
b51485d6c750cae42908e87c2615bd80f3a3548a3cd32d731bb70a66af63378f.exe windows x86
c33521b87393e07ef1a4e7edd1b791d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
BaseCheckAppcompatCache
GetNumaHighestNodeNumber
GlobalMemoryStatusEx
FindFirstVolumeA
GlobalMemoryStatusEx
GetProfileStringW
BaseProcessInitPostImport
FindResourceExW
SetSystemPowerState
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE