Static task
static1
Behavioral task
behavioral1
Sample
19dd706125cc9018ac816cfe241877cd05e8935da2b0fc51ddd310c2a72a4a4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
19dd706125cc9018ac816cfe241877cd05e8935da2b0fc51ddd310c2a72a4a4a.exe
Resource
win10v2004-20220901-en
General
-
Target
19dd706125cc9018ac816cfe241877cd05e8935da2b0fc51ddd310c2a72a4a4a
-
Size
64KB
-
MD5
9b65ee86cd9fab82c216b791da10d578
-
SHA1
65fd6162dfbc1e40676ce13534134e50a98ed379
-
SHA256
19dd706125cc9018ac816cfe241877cd05e8935da2b0fc51ddd310c2a72a4a4a
-
SHA512
d8f53d8fd7a1aa9e190583e91d322a6ed202af8097cd37b64c9026e401961d794b2496b2e24498dc74c3961bb34d0ccdc4b2220d5ce8d209a0af7a09e03a9cb1
-
SSDEEP
1536:BqO1PXjMFY+j4vFqGzzHTcwLuLWcvKp4LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLf:BBPJ+qFqczHnoqS
Malware Config
Signatures
Files
-
19dd706125cc9018ac816cfe241877cd05e8935da2b0fc51ddd310c2a72a4a4a.exe windows x86
3d6543644dcd1e42eb6e6eade7504b52
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleHandleW
FindNextVolumeA
GetConsoleMode
GetEnvironmentVariableW
CreateSemaphoreA
ReadConsoleA
GetStringTypeA
GetFullPathNameW
GetFullPathNameW
HeapCreate
ReleaseSemaphore
CloseHandle
WaitForMultipleObjects
GetDiskFreeSpaceW
CloseHandle
VirtualFree
GetVolumePathNameW
Sleep
OpenMutexW
CloseHandle
GetCurrentDirectoryA
FindFirstVolumeA
dbghelp
FindFileInPath
ImageRvaToVa
ImageNtHeader
ImageRvaToSection
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE