Static task
static1
Behavioral task
behavioral1
Sample
ce74d9000860a6b3e9c02a4c208330d2906832223cdbb7e5ffe4f25a2fb2c316.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce74d9000860a6b3e9c02a4c208330d2906832223cdbb7e5ffe4f25a2fb2c316.exe
Resource
win10v2004-20221111-en
General
-
Target
ce74d9000860a6b3e9c02a4c208330d2906832223cdbb7e5ffe4f25a2fb2c316
-
Size
1.4MB
-
MD5
e6d2564f8991351b3dcc2f41a2c293d2
-
SHA1
27b46a39bf591bac821e3b000d33bd5d211011a4
-
SHA256
ce74d9000860a6b3e9c02a4c208330d2906832223cdbb7e5ffe4f25a2fb2c316
-
SHA512
e52a92746f091804def5b73d6b887eb859fe4a289c31252657a9d03a2b821c03f902e8965505a1ef9e2718a8e640efe7abe1889fb4e03b191122509bd6f315e8
-
SSDEEP
12288:iFBAXcgC0xl3vvM7X/OiynAbSj8WsZASykvETBbECzxkhnyZmVZr7egDAn7IUvXw:uB/i73KPteLeAKalECzxGn4m/rq7Kn9
Malware Config
Signatures
Files
-
ce74d9000860a6b3e9c02a4c208330d2906832223cdbb7e5ffe4f25a2fb2c316.exe windows x86
3b197997253fc83ff4413ae685bb7b8b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommError
IsBadHugeWritePtr
EnumResourceNamesA
GetThreadSelectorEntry
SetConsoleNumberOfCommandsA
GetCPInfo
VerSetConditionMask
GetWindowsDirectoryA
GetSystemWindowsDirectoryA
IsProcessorFeaturePresent
OpenFileMappingA
GetWriteWatch
OpenThread
GetThreadIOPendingFlag
TransmitCommChar
GetComputerNameA
GetDiskFreeSpaceA
LocalShrink
VirtualAlloc
ReadConsoleInputA
FindFirstChangeNotificationA
ReadConsoleOutputCharacterA
dpnet
DirectPlay8Create
advapi32
CredFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 441KB - Virtual size: 711KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ