Static task
static1
Behavioral task
behavioral1
Sample
42c19d00d05ddb5ec512fbc424f14dcc318b56c2a24964d31496e07f08bcacab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42c19d00d05ddb5ec512fbc424f14dcc318b56c2a24964d31496e07f08bcacab.exe
Resource
win10v2004-20220812-en
General
-
Target
42c19d00d05ddb5ec512fbc424f14dcc318b56c2a24964d31496e07f08bcacab
-
Size
76KB
-
MD5
40a8d357b75b2370b21587efd0ad21e3
-
SHA1
2d914f8add2018c9f8e49ec7f4169ecff0d49f88
-
SHA256
42c19d00d05ddb5ec512fbc424f14dcc318b56c2a24964d31496e07f08bcacab
-
SHA512
34fe03d388d4b4503c0ec7047214ba368d3720793c978385dfd6d6f78091cd97d0860e8aee8f0becc6074204934c5255844904adad821e23b640f23d944f7d1e
-
SSDEEP
1536:GNt47pzA895pYfEv2lHurZ4UMnJph2xYrVU9DSaOFsFpjVrs2ryrd1vUQuq6:Gw7Om5pOO9r1q3sqU9DGIHs2qo
Malware Config
Signatures
Files
-
42c19d00d05ddb5ec512fbc424f14dcc318b56c2a24964d31496e07f08bcacab.exe windows x86
66a63ed1a689a28d59a67dc27a9dfc5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreW
GetDevicePowerState
DeleteFileW
SetFileShortNameA
GetNumaProcessorMap
MoveFileWithProgressW
FindResourceExA
GetProcAddress
DeviceIoControl
GetFileAttributesExA
BindIoCompletionCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE