Static task
static1
Behavioral task
behavioral1
Sample
cea29fd0a71b5a4077f41ce7664d4c00f094a725d2b878719d3bc1fdabd6cf36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cea29fd0a71b5a4077f41ce7664d4c00f094a725d2b878719d3bc1fdabd6cf36.exe
Resource
win10v2004-20220901-en
General
-
Target
cea29fd0a71b5a4077f41ce7664d4c00f094a725d2b878719d3bc1fdabd6cf36
-
Size
56KB
-
MD5
69fa25b0794485458776dab54915c16d
-
SHA1
4b0b5502bbee396b728b0891bcc1f658e50c9ab7
-
SHA256
cea29fd0a71b5a4077f41ce7664d4c00f094a725d2b878719d3bc1fdabd6cf36
-
SHA512
11ae2be0c249a28017c83fff3a09bbfbf8ef3591c458169d32fdeb02b15ec898b919fdf74ca027f3e48b0b61f381fac7e6e24d937771cc52af2c9a5eecc32f9a
-
SSDEEP
1536:F3cURuXfixcotuoNZFcC0rYOiTKlkdJnl/:F3BRuPtKGC0r/dlkXnR
Malware Config
Signatures
Files
-
cea29fd0a71b5a4077f41ce7664d4c00f094a725d2b878719d3bc1fdabd6cf36.exe windows x86
e7c86171b93756022788372a5edacdc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FillConsoleOutputCharacterW
LocalFree
GetCurrentProcess
LCMapStringW
AddLocalAlternateComputerNameA
BaseProcessInitPostImport
GlobalUnlock
InterlockedPopEntrySList
DefineDosDeviceW
GetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE