Static task
static1
Behavioral task
behavioral1
Sample
2629d708c16ed9fbc6aa152e595b78484339ace2dc55c856d1b5d160e485a182.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2629d708c16ed9fbc6aa152e595b78484339ace2dc55c856d1b5d160e485a182.exe
Resource
win10v2004-20220901-en
General
-
Target
2629d708c16ed9fbc6aa152e595b78484339ace2dc55c856d1b5d160e485a182
-
Size
19KB
-
MD5
3b644594b2489893f95acfca8419c4c2
-
SHA1
9c8518009300d7209bed6d91fb00f8e720460bad
-
SHA256
2629d708c16ed9fbc6aa152e595b78484339ace2dc55c856d1b5d160e485a182
-
SHA512
4d320ca63b7ceda471fff086763d0c8f14dbf6a7ed3aa3d0c6139a9a3a58cf9585b849abafbf576b5336e7d5da11c3a5c5b990ff5d4d76d21638319514c2cee5
-
SSDEEP
384:l88hYS1Ta1mMVCOrgKS/nJqXrQSz1is1lG4nfHH5hTs:l3k1mMV7F68XrQs18oHZ
Malware Config
Signatures
Files
-
2629d708c16ed9fbc6aa152e595b78484339ace2dc55c856d1b5d160e485a182.exe windows x86
714beef5c10e5bdd5ecf905a3f470f76
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
FlushFileBuffers
GetTempPathA
GetDiskFreeSpaceExA
VirtualAlloc
SetUnhandledExceptionFilter
GetSystemWindowsDirectoryA
GetCommandLineA
GetDiskFreeSpaceA
VirtualLock
IsBadWritePtr
GetVolumeInformationA
CreateNamedPipeA
GetPriorityClass
ReleaseSemaphore
GetLastError
GetCPInfoExA
GetPrivateProfileStringA
RtlMoveMemory
SetLastConsoleEventActive
GlobalHandle
IsWow64Process
PurgeComm
advapi32
CredMarshalCredentialW
CredFree
dpmodemx
SPInit
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ