Static task
static1
Behavioral task
behavioral1
Sample
2f76d47af6c73358ecf03660d66ba84d28f8d69f8ae13bbe978bffd4eb589931.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f76d47af6c73358ecf03660d66ba84d28f8d69f8ae13bbe978bffd4eb589931.exe
Resource
win10v2004-20220812-en
General
-
Target
2f76d47af6c73358ecf03660d66ba84d28f8d69f8ae13bbe978bffd4eb589931
-
Size
64KB
-
MD5
16330c88b21c98ca30ceaa731351f250
-
SHA1
7181e64768117fa63054cb0e111d15b2e4da8469
-
SHA256
2f76d47af6c73358ecf03660d66ba84d28f8d69f8ae13bbe978bffd4eb589931
-
SHA512
cff832a6b19dfe8d1de8d10211fe875242547f9a98998b6be25df6eb27fcafaf5e05aa0049e92d332983895ab2171e5c9637d7ca40dc8ed3940f6b519a28379a
-
SSDEEP
1536:jre4wgBwPHWJXnpg4du+MiStatDKmAHJ8KhWWq3HbB:jCjzHWluOLStatG5H+DWqLB
Malware Config
Signatures
Files
-
2f76d47af6c73358ecf03660d66ba84d28f8d69f8ae13bbe978bffd4eb589931.exe windows x86
cb3b1d80a98c390bc19120aa477cc8e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseSemaphore
Sleep
GetFullPathNameW
GetConsoleMode
CloseHandle
CreateSemaphoreA
GetModuleHandleW
GetVolumePathNameW
GetEnvironmentVariableW
OpenMutexW
FindFirstVolumeA
CloseHandle
GetStringTypeA
GetFullPathNameW
WaitForMultipleObjects
GetModuleHandleA
VirtualFree
HeapCreate
CloseHandle
FindNextVolumeA
ReadConsoleA
GetDiskFreeSpaceW
GetCurrentDirectoryA
dbghelp
FindFileInPath
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.res Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE