Static task
static1
Behavioral task
behavioral1
Sample
b74ff30738666e7ab1055927454b2eecf33127ccc09640a79819ab4407d4882e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b74ff30738666e7ab1055927454b2eecf33127ccc09640a79819ab4407d4882e.exe
Resource
win10v2004-20221111-en
General
-
Target
b74ff30738666e7ab1055927454b2eecf33127ccc09640a79819ab4407d4882e
-
Size
1010KB
-
MD5
cf74f2f675ae2a5013b31eeb86a8d9bf
-
SHA1
c4b0f67715d4e35ab801975de79c5c9db561d849
-
SHA256
b74ff30738666e7ab1055927454b2eecf33127ccc09640a79819ab4407d4882e
-
SHA512
2047fea2d96ccd759706cd3639c9b1098b69d62138969adcbb5599de22af3ca7704ad572afc9c9522b5944b5d33113a431242255e3009b3e196604f9b930628a
-
SSDEEP
24576:5jn2CVJSIYH7loOR7TwToLrPaLbvNz+eV3r6Zf:5aIkP7TwT4W1zxx+f
Malware Config
Signatures
Files
-
b74ff30738666e7ab1055927454b2eecf33127ccc09640a79819ab4407d4882e.exe windows x86
cbd262f942fb903cd67953ada2864ddf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
LoadLibraryA
GetVersionExA
CreateFileA
IsBadWritePtr
GetTickCount
WriteFile
DeleteFileA
LockResource
GetStringTypeA
FindClose
DeleteCriticalSection
GetFullPathNameA
Sections
.text Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 639KB - Virtual size: 638KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ