Static task
static1
Behavioral task
behavioral1
Sample
4aa588fb214d9751184977fec2168a851eadd320fa92fcdaa15e803e5e087a07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4aa588fb214d9751184977fec2168a851eadd320fa92fcdaa15e803e5e087a07.exe
Resource
win10v2004-20221111-en
General
-
Target
4aa588fb214d9751184977fec2168a851eadd320fa92fcdaa15e803e5e087a07
-
Size
80KB
-
MD5
68f398837b36af67c176e831d95fca98
-
SHA1
16baae90f3c211213eefc0771ab8cb250e125cf5
-
SHA256
4aa588fb214d9751184977fec2168a851eadd320fa92fcdaa15e803e5e087a07
-
SHA512
21df498f0d9263e61e323e87cd45c2d75a5325a404142c1f7e227f4b9a78e93cef1153940eb8f2fe5419306b4c3e59f0f6711dbc38abdf430f0bb33d2cf550fa
-
SSDEEP
1536:8+++1HvEIYOCfXvUeZi0CZrJ2trlKosdSKSOMZzUj/2xM:fPzM5qk1sdIZdxM
Malware Config
Signatures
Files
-
4aa588fb214d9751184977fec2168a851eadd320fa92fcdaa15e803e5e087a07.exe windows x86
c4f866596d1d55703c63422783d85d1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFileEx
GetThreadTimes
_hwrite
GetDefaultSortkeySize
TermsrvAppInstallMode
DefineDosDeviceW
SleepEx
EnumerateLocalComputerNamesA
GetProcessShutdownParameters
SetFilePointerEx
GetStartupInfoW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE