Static task
static1
Behavioral task
behavioral1
Sample
a62046720fcf1160838ac16840ab5c8e9159ef1c57b89cafced6802c9d776916.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a62046720fcf1160838ac16840ab5c8e9159ef1c57b89cafced6802c9d776916.exe
Resource
win10v2004-20221111-en
General
-
Target
a62046720fcf1160838ac16840ab5c8e9159ef1c57b89cafced6802c9d776916
-
Size
71KB
-
MD5
44f46ba182c55c532b9107f3aa18f96b
-
SHA1
0d6084cd834d3cbb220338e9082183f78b97f93f
-
SHA256
a62046720fcf1160838ac16840ab5c8e9159ef1c57b89cafced6802c9d776916
-
SHA512
7e69f784c56f739cd0bfb5c42c4e8dd9dd274bda83f51ded92416ccc8eddf1043adde38842e7f6911a39cf51d4cf13a886f7f1662463b82135d07a54903f0733
-
SSDEEP
1536:grrrQRf4y+8FCb5Bsd/n59E/t/CDdJg6JTDwj7KW6sPtNam:3RfKbvshn5OCB+ETUj7K1sjam
Malware Config
Signatures
Files
-
a62046720fcf1160838ac16840ab5c8e9159ef1c57b89cafced6802c9d776916.exe windows x86
7a324f9f5457f998781f01976997a616
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
ReplaceFile
MulDiv
WriteProfileStringW
GetProfileStringA
HeapExtend
MapUserPhysicalPages
FindVolumeClose
GetVDMCurrentDirectories
Thread32First
QueryWin31IniFilesMappedToRegistry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE