Static task
static1
Behavioral task
behavioral1
Sample
c033c6dc83e41edcaa51b45402642b5da0e17266c8f48f662cc95e81a61f8919.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c033c6dc83e41edcaa51b45402642b5da0e17266c8f48f662cc95e81a61f8919.exe
Resource
win10v2004-20220812-en
General
-
Target
c033c6dc83e41edcaa51b45402642b5da0e17266c8f48f662cc95e81a61f8919
-
Size
115KB
-
MD5
468bf32385e0b37fe12f6be0f5973ce4
-
SHA1
9b0fbd44c709d9a00d79c022fdd39b2efd6ab899
-
SHA256
c033c6dc83e41edcaa51b45402642b5da0e17266c8f48f662cc95e81a61f8919
-
SHA512
3309f2c831ee9ce397463e51aa2641efa8a5feb9ba534c1249041cb4bbc3cef23ba65d335780cdf2fedf2a7e02239208fafcd1b5bf1efe3ce916b05988864422
-
SSDEEP
1536:VgP9EBoEyVpVrLUcqJ5mqu1Bol5apKcpyr:VgP9JBrocqNl5apKOyr
Malware Config
Signatures
Files
-
c033c6dc83e41edcaa51b45402642b5da0e17266c8f48f662cc95e81a61f8919.exe windows x86
5785be3f8f431885a96e64dfb83acaab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleOutputA
EnumUILanguagesA
CreateHardLinkA
WaitNamedPipeW
GetConsoleWindow
GetProcessVersion
IsBadHugeReadPtr
GetConsoleAliasExesA
ReadFileEx
GetProcessHeaps
GetFullPathNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE