Static task
static1
Behavioral task
behavioral1
Sample
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe
Resource
win10v2004-20221111-en
General
-
Target
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348
-
Size
108KB
-
MD5
50dbb7b28c333262362302738ee9fd40
-
SHA1
a09b97f37cacb65492d8fa78c99e161a06f13aa6
-
SHA256
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348
-
SHA512
593558cc228d33eba3bf0be3572d8c449b4fb66f9aa964f06d506249d87ad5fc524413fa00eb8738e89728666141ecdaebff8da2a2f35151b3c25f5ee05b3c7f
-
SSDEEP
1536:oVrbjzNGIc5uiLmJaP5SHC1SsJl+oZvaE+hUZs+A4L0PIKECL4fP1F:oFbsFsHYQHijHZv+KZtnYjLEP1F
Malware Config
Signatures
Files
-
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe windows x86
f2366578406c52a3cde5d38353688f8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapLock
EraseTape
WritePrivateProfileStringA
CancelWaitableTimer
Toolhelp32ReadProcessMemory
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
text Size: 8KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ