Static task
static1
Behavioral task
behavioral1
Sample
762cd3d2e8899061d39948174c7bc5a3efc7f158c25a14c7135d3978d1db5900.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
762cd3d2e8899061d39948174c7bc5a3efc7f158c25a14c7135d3978d1db5900.exe
Resource
win10v2004-20220901-en
General
-
Target
762cd3d2e8899061d39948174c7bc5a3efc7f158c25a14c7135d3978d1db5900
-
Size
119KB
-
MD5
6cc69becdf148e22b85b44a0f8393f1d
-
SHA1
175ec261e16e5cd80ddbf0aa027c14f0589a4043
-
SHA256
762cd3d2e8899061d39948174c7bc5a3efc7f158c25a14c7135d3978d1db5900
-
SHA512
57eba0bd0db54052065114ebb6d74bfdbda20ebed074a2a60b3feff63b3a9a6cfc8a55aefd25c89681e973a724a88cce3c6ebf3548e5e7590bc8f6023a7a287e
-
SSDEEP
1536:T2WAuHyIAl2SeLPGk+b0Ar5sIYsGU8lpjVrs2ryrd1vUQuqSSqK5tnCvv:yWA6mlneLPaRizsGU8lHs2qxnC
Malware Config
Signatures
Files
-
762cd3d2e8899061d39948174c7bc5a3efc7f158c25a14c7135d3978d1db5900.exe windows x86
d7611123e6b9526247a84dab394619af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExA
TermsrvAppInstallMode
LZCopy
GetNumaAvailableMemory
MapUserPhysicalPagesScatter
EnumResourceLanguagesA
GetFileType
FindAtomA
LoadLibraryW
GetProcAddress
SetInformationJobObject
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE