Static task
static1
Behavioral task
behavioral1
Sample
70daee6f60321f60f30a145bf782aa48a60a23c1ff69fbcf79149acf5c2e8dfc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
70daee6f60321f60f30a145bf782aa48a60a23c1ff69fbcf79149acf5c2e8dfc.exe
Resource
win10v2004-20221111-en
General
-
Target
70daee6f60321f60f30a145bf782aa48a60a23c1ff69fbcf79149acf5c2e8dfc
-
Size
58KB
-
MD5
5da9729df58ef4c9953186231783bcee
-
SHA1
008a91eab91c0293d16975e5068873037678ca6c
-
SHA256
70daee6f60321f60f30a145bf782aa48a60a23c1ff69fbcf79149acf5c2e8dfc
-
SHA512
0f2823c98f440db21cfbf2552e2a4878e05a7f55bde20312a183c6152283f3117018c8cb374c3b22b76108d9936e7367186d7c63f2ccf85d7e2221e9095c6016
-
SSDEEP
768:GIeCrx54MXwPyawGxpOIaqK7gr3mhTP4ZynApYogFpABpzirCP+sWkEyOXhSaSkq:GKFXIpOXh4qA+mBpzKHknauX4MNZ8E
Malware Config
Signatures
Files
-
70daee6f60321f60f30a145bf782aa48a60a23c1ff69fbcf79149acf5c2e8dfc.exe windows x86
c7269eb380030f6d161f2e2ba0338c49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessVersion
CreateThread
WaitNamedPipeW
GlobalUnlock
lstrcatA
GetFileSize
CloseProfileUserMapping
FileTimeToDosDateTime
ReadConsoleOutputCharacterW
SystemTimeToTzSpecificLocalTime
DuplicateConsoleHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE