Static task
static1
Behavioral task
behavioral1
Sample
776336411884695736bc2e3fb3ed12df117921a243c58f65917b18b4cc10ac5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
776336411884695736bc2e3fb3ed12df117921a243c58f65917b18b4cc10ac5b.exe
Resource
win10v2004-20220812-en
General
-
Target
776336411884695736bc2e3fb3ed12df117921a243c58f65917b18b4cc10ac5b
-
Size
66KB
-
MD5
5dbeae896a709411dabbc093cde1b90f
-
SHA1
a12316f036aaa1a599f8b3bda007a8a9829a3594
-
SHA256
776336411884695736bc2e3fb3ed12df117921a243c58f65917b18b4cc10ac5b
-
SHA512
6b0e8965938a07076926a466d64e26d3712c2b8e78bb994a8fd2a044ed8dc7f534a5570c2c94779f020ee53821d918587d02c0d20a299bfaff13f224ebb20550
-
SSDEEP
1536:QA/QCK5hPyg0byZ9C1uZteuOULfomnc3AEa51MYp6BlqJxxVfBd:QA/GTl0byZhZteuOUToi2ZdYpAlG1fL
Malware Config
Signatures
Files
-
776336411884695736bc2e3fb3ed12df117921a243c58f65917b18b4cc10ac5b.exe windows x86
3c548481e9d7c3b61da563a46dd02f6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOverlappedResult
lstrcpynW
DefineDosDeviceA
SetFileValidData
SetComputerNameExA
SetConsoleTitleW
LocalFlags
TlsGetValue
GetCurrencyFormatW
RtlMoveMemory
Sleep
GetConsoleCommandHistoryW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE