Static task
static1
Behavioral task
behavioral1
Sample
c5afc87a166e9fb0762dde0318eaf8d1ef2ad7a1271ece1e7a5f8eddd6f70d14.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5afc87a166e9fb0762dde0318eaf8d1ef2ad7a1271ece1e7a5f8eddd6f70d14.exe
Resource
win10v2004-20220812-en
General
-
Target
c5afc87a166e9fb0762dde0318eaf8d1ef2ad7a1271ece1e7a5f8eddd6f70d14
-
Size
76KB
-
MD5
f96e6725bf93aff92d9faf48c5593b04
-
SHA1
e541939cab4dcfd79ac14c1680fe937532f1277f
-
SHA256
c5afc87a166e9fb0762dde0318eaf8d1ef2ad7a1271ece1e7a5f8eddd6f70d14
-
SHA512
d000c1606b06b43378884bf8b194751e344cfde50da85cccd714ded6b91419030a47ce1e792632b9e1f2cee92a8d63d119e746411349af8af085b1a5c43ccbde
-
SSDEEP
1536:6GP2DIEYKgxwDYHbwjt4iVn1PWNvE1pjVrs2ryrd1vUQuq6:VP2YeDYH4V1PWNvUHs2qo
Malware Config
Signatures
Files
-
c5afc87a166e9fb0762dde0318eaf8d1ef2ad7a1271ece1e7a5f8eddd6f70d14.exe windows x86
ddcfc8e8817c582475df8131c036b678
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
GetDefaultCommConfigA
CreateHardLinkA
ScrollConsoleScreenBufferA
FlushFileBuffers
RtlMoveMemory
lstrcmpi
GetVolumePathNamesForVolumeNameW
GetDllDirectoryW
GetCommState
DeleteVolumeMountPointW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE