Static task
static1
Behavioral task
behavioral1
Sample
a329a35f2361c3a50b75835b5855b2cb26418ed8ccc91ce92c0f0191ba9a641d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a329a35f2361c3a50b75835b5855b2cb26418ed8ccc91ce92c0f0191ba9a641d.exe
Resource
win10v2004-20221111-en
General
-
Target
a329a35f2361c3a50b75835b5855b2cb26418ed8ccc91ce92c0f0191ba9a641d
-
Size
91KB
-
MD5
5cb439c41c99dce8a61ce5dacaf52c38
-
SHA1
ff3ccca459a335619206ef12ffa373f97ba9653d
-
SHA256
a329a35f2361c3a50b75835b5855b2cb26418ed8ccc91ce92c0f0191ba9a641d
-
SHA512
bb29ba5db7db5c5e98236ec876408dad32dc5e4249ed6dd735b1a859fce06c4423d7f4d0e3c0303b958c1bd2a3f07c4f52369f1bc211b96885b576d5a969c624
-
SSDEEP
1536:pHpx8G8H9Eg+wcWb5ZuA1BwUA9ODnhya0A/xz4Ta8c:pJO6gL5sA1Vhya0st4M
Malware Config
Signatures
Files
-
a329a35f2361c3a50b75835b5855b2cb26418ed8ccc91ce92c0f0191ba9a641d.exe windows x86
c6e13dbafabd11de47f229a0160c011c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExpungeConsoleCommandHistoryW
GetStringTypeExW
GetDefaultCommConfigW
GetConsoleInputWaitHandle
DisconnectNamedPipe
CreateActCtxW
GetModuleHandleExA
GetMailslotInfo
GetDefaultCommConfigW
GlobalLock
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE