Static task
static1
Behavioral task
behavioral1
Sample
ef9e5a222c9d9af66010f4818369fccead9950c78890dab0fbe65f83609d635b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef9e5a222c9d9af66010f4818369fccead9950c78890dab0fbe65f83609d635b.exe
Resource
win10v2004-20221111-en
General
-
Target
ef9e5a222c9d9af66010f4818369fccead9950c78890dab0fbe65f83609d635b
-
Size
61KB
-
MD5
489651015573c7fae727649684015732
-
SHA1
64bba601c1d223f2302b9fdfde7471e8b2346604
-
SHA256
ef9e5a222c9d9af66010f4818369fccead9950c78890dab0fbe65f83609d635b
-
SHA512
e23389b2c27765cb86c10d17f3b40818882c2384b1a64bb07380fc8e11685a6c6030aff57b81b796b50ac25e8f23f6fb075497642afa86435da0287f50f910e4
-
SSDEEP
1536:NgYIisHMvQ/EjXBfdWlumuhBI40CSi6ybEFOS:M3svvZdhW40CSq4US
Malware Config
Signatures
Files
-
ef9e5a222c9d9af66010f4818369fccead9950c78890dab0fbe65f83609d635b.exe windows x86
8c1d537e2d4fcc6f1f03511d6213b0dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommProperties
CopyLZFile
GetNumaAvailableMemory
GetConsoleAliasW
SetComputerNameExA
GetConsoleCharType
EnumerateLocalComputerNamesA
ValidateLocale
WriteConsoleW
VirtualProtect
GetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE