Static task
static1
Behavioral task
behavioral1
Sample
148ad3edb3c5a9d79d26d6f0dfa32976b2ff4e0971ed3a8968fc460049e44cb2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
148ad3edb3c5a9d79d26d6f0dfa32976b2ff4e0971ed3a8968fc460049e44cb2.exe
Resource
win10v2004-20220812-en
General
-
Target
148ad3edb3c5a9d79d26d6f0dfa32976b2ff4e0971ed3a8968fc460049e44cb2
-
Size
71KB
-
MD5
d3241459eb4c31b583a7aa5d809f7e0b
-
SHA1
b5befefd1e3d11a65e38b80036bd0d13f6504393
-
SHA256
148ad3edb3c5a9d79d26d6f0dfa32976b2ff4e0971ed3a8968fc460049e44cb2
-
SHA512
f8aead948a3f5f24235d89ab69514f82f11ae0dba57960f850b14ba7bb48044ef9e84181a774b2e79d1d9e339bcf76ff488d57ab5ad9e61c9c85faeb87fe4ca5
-
SSDEEP
1536:tl0T7YIJosG8ZD/I47sbT+AWQT+1Ie/+NFqwf56gLsUdXIpWbCS6sOJHXfNa3dgv:tl0T7YIfR/ZWT3cz2rBf5bLJVIpW6bJD
Malware Config
Signatures
Files
-
148ad3edb3c5a9d79d26d6f0dfa32976b2ff4e0971ed3a8968fc460049e44cb2.exe windows x86
3091f83a6547088412a7dbfe568a2191
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedPopEntrySList
CreateEventA
CreatePipe
ConvertThreadToFiber
GetVersionExW
CreateProcessW
InterlockedFlushSList
CloseHandle
DeleteFileW
QueryDosDeviceW
GetCurrentProcessId
LocalReAlloc
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE