Static task
static1
Behavioral task
behavioral1
Sample
f459df38c6cd60717aaa63971f4477b1cf44e25d74433d04483cdf2d05e53a4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f459df38c6cd60717aaa63971f4477b1cf44e25d74433d04483cdf2d05e53a4a.exe
Resource
win10v2004-20221111-en
General
-
Target
f459df38c6cd60717aaa63971f4477b1cf44e25d74433d04483cdf2d05e53a4a
-
Size
75KB
-
MD5
792e46ccab1cb4062f0f32ba7900d275
-
SHA1
ba093130ea74c4ec8e9deec95f2765e74d7e1cb2
-
SHA256
f459df38c6cd60717aaa63971f4477b1cf44e25d74433d04483cdf2d05e53a4a
-
SHA512
f40c29b17ecb4c659a4d623d888dd284787d1f6dcee662c00a3781ae4be4b5d22365e66b9af3ca7ba4d281cb72dab002771126b22d3ca3268b817b420525ee2f
-
SSDEEP
1536:CMp/EAts3LUOHSdJU14dvKRr95+VzVOjbTSbJY/m4NkSZOOk9JPyNVPpfeEzPpnc:32olpE/mkk/OkfPkVPBeSA3t/T1
Malware Config
Signatures
Files
-
f459df38c6cd60717aaa63971f4477b1cf44e25d74433d04483cdf2d05e53a4a.exe windows x86
0c7534ad4366fbf82b19b031ae48fbcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetWriteWatch
CopyFileA
GetFirmwareEnvironmentVariableA
IsSystemResumeAutomatic
lstrcmpA
ReadConsoleInputW
GetWriteWatch
CreateFileMappingA
TzSpecificLocalTimeToSystemTime
EnumResourceLanguagesW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 61KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE