Static task
static1
Behavioral task
behavioral1
Sample
b2da05bb2d370e32059df4c20bbe894232143b48b34473c4af902e5da17df165.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b2da05bb2d370e32059df4c20bbe894232143b48b34473c4af902e5da17df165.exe
Resource
win10v2004-20221111-en
General
-
Target
b2da05bb2d370e32059df4c20bbe894232143b48b34473c4af902e5da17df165
-
Size
56KB
-
MD5
06524f125eece7a54370609287188980
-
SHA1
634434e779904a1a77f1da55893ab4932e7a8b4f
-
SHA256
b2da05bb2d370e32059df4c20bbe894232143b48b34473c4af902e5da17df165
-
SHA512
6da4ffce1f05c48aca226d447a13ed5621580b3fe8faf9259f2406b0931aa753d4feb2b2b8baae0f7173af0721e54f7ed7c4f03d500a070de5222594ccdb4b5e
-
SSDEEP
1536:2LHk9ghczcXpQ130F5+V3n1r8HALLnp6V6XOImucNtYyLrPyjkpx4T0/Fex9V2lG:2IGP74GS/t/d298aHvrhc
Malware Config
Signatures
Files
-
b2da05bb2d370e32059df4c20bbe894232143b48b34473c4af902e5da17df165.exe windows x86
b4b6d6fd388038a39ff98000e68d80b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenWaitableTimerW
SetProcessAffinityMask
IsDebuggerPresent
SetSystemPowerState
RtlUnwind
ActivateActCtx
GetConsoleDisplayMode
EnumerateLocalComputerNamesW
ReplaceFileA
LZCloseFile
Module32Next
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE