Static task
static1
Behavioral task
behavioral1
Sample
86079eb0a17f2723c8db5b76b6a27533b9f4d7a9e0ed33ae381f572c8c1d7303.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
86079eb0a17f2723c8db5b76b6a27533b9f4d7a9e0ed33ae381f572c8c1d7303.exe
Resource
win10v2004-20220901-en
General
-
Target
86079eb0a17f2723c8db5b76b6a27533b9f4d7a9e0ed33ae381f572c8c1d7303
-
Size
63KB
-
MD5
9257b35b947181c38df0a3593b863226
-
SHA1
9367d70899c7116dc1d1f563e8e1e08b002b9473
-
SHA256
86079eb0a17f2723c8db5b76b6a27533b9f4d7a9e0ed33ae381f572c8c1d7303
-
SHA512
ecdcc7084a199988dd9cdc5b0ad83bfdb8187db24d73615e195f8d6b8ab33f34f31d17d9d55cd880be1f2d4127f46d6617f9aa248db0c9eef815dbc87595866d
-
SSDEEP
1536:cZgo9EdrAqr6E+mlwI6CYKHV2DY8KeBW/lj72bqHUxca:cZUdTdvACYIUDlE/lja+H2/
Malware Config
Signatures
Files
-
86079eb0a17f2723c8db5b76b6a27533b9f4d7a9e0ed33ae381f572c8c1d7303.exe windows x86
75ad6e48c66c1077d1a0a7c378449824
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BaseUpdateAppcompatCache
Heap32First
OpenProfileUserMapping
DeleteVolumeMountPointW
NlsGetCacheUpdateCount
GetFirmwareEnvironmentVariableW
BeginUpdateResourceW
GetStringTypeW
CreateTimerQueue
GetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.krdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE