Static task
static1
Behavioral task
behavioral1
Sample
71648a192b9ebb0eebd80611a60e814c4469118fadde29f30819c4c50386a96d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
71648a192b9ebb0eebd80611a60e814c4469118fadde29f30819c4c50386a96d.exe
Resource
win10v2004-20221111-en
General
-
Target
71648a192b9ebb0eebd80611a60e814c4469118fadde29f30819c4c50386a96d
-
Size
119KB
-
MD5
a84af7f5a8c65572fefd3aebcfa55cdf
-
SHA1
3a4be9495e3fe5cb3a377c7d0154d558d6ad88c1
-
SHA256
71648a192b9ebb0eebd80611a60e814c4469118fadde29f30819c4c50386a96d
-
SHA512
ed286ed554e7a8935a44583eb6476d7556d8e69733a7f42fc562452c387ee2013e82f400df8dcf814c15ce6cfa61594c963dbb5c6c3c147a2754f4c895713ee1
-
SSDEEP
1536:wubdcquwq6ySFt7bCgkPtC0HGl5eMfE+sXwvjUokGxkpjVrs2ryrd1vUQuqSSqKk:wcufMncOeMfEGRk9Hs2qxnC
Malware Config
Signatures
Files
-
71648a192b9ebb0eebd80611a60e814c4469118fadde29f30819c4c50386a96d.exe windows x86
c780a38a22115f1dffbb4b6b49193d81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
CreateMutexA
CreateFileA
SetVDMCurrentDirectories
SetNamedPipeHandleState
GetDefaultCommConfigW
GetComputerNameW
GetConsoleFontInfo
GetPrivateProfileIntW
GetCPFileNameFromRegistry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE