Static task
static1
Behavioral task
behavioral1
Sample
30fff53d9f5414c1a6e52e87070e8a8d67be1fec274f20b21f55fc3b0d5d8e28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
30fff53d9f5414c1a6e52e87070e8a8d67be1fec274f20b21f55fc3b0d5d8e28.exe
Resource
win10v2004-20220812-en
General
-
Target
30fff53d9f5414c1a6e52e87070e8a8d67be1fec274f20b21f55fc3b0d5d8e28
-
Size
66KB
-
MD5
86367a83c7f9bc25dc92b3d55095b50f
-
SHA1
842465bcb5816eedfc0bd5daaefc4e95c1395124
-
SHA256
30fff53d9f5414c1a6e52e87070e8a8d67be1fec274f20b21f55fc3b0d5d8e28
-
SHA512
abf66b0fc7748db6723f228f028f5941bb16758d238b6b2589722a7127c82d67ce349cd129ad4b73f3f595a35afeeaf07255cfa5c6703cf8cea898566d802cb1
-
SSDEEP
1536:Tx9XcrPUyOemKCa9yC4T9unOSVd3+T1jxmIKPpr:V92PUDRKtr4T9xSVNo11m3
Malware Config
Signatures
Files
-
30fff53d9f5414c1a6e52e87070e8a8d67be1fec274f20b21f55fc3b0d5d8e28.exe windows x86
d6d48a94d42572357990e61623441905
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnregisterConsoleIME
GetNumberOfConsoleFonts
SetFileAttributesA
GetVolumePathNameW
FreeLibrary
RtlCaptureStackBackTrace
GetNumaAvailableMemoryNode
CloseConsoleHandle
GetDevicePowerState
lstrcmp
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE