Static task
static1
Behavioral task
behavioral1
Sample
65088f78dd7fc1e579c86c2793844784cba2338dd583aa191d9df3b7f1b66ffb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
65088f78dd7fc1e579c86c2793844784cba2338dd583aa191d9df3b7f1b66ffb.exe
Resource
win10v2004-20221111-en
General
-
Target
65088f78dd7fc1e579c86c2793844784cba2338dd583aa191d9df3b7f1b66ffb
-
Size
15KB
-
MD5
03d260db29aa26b95266e56d533f3690
-
SHA1
258b6fb627ade87c99268178698c2c176999af47
-
SHA256
65088f78dd7fc1e579c86c2793844784cba2338dd583aa191d9df3b7f1b66ffb
-
SHA512
f616235faaac512f26233f9252aec51782729db1c795cd08ae15d6d7a39401803a59d9f6a64f0689fbec89cc4b48675902fc12af832c477f399d0faf93a59c49
-
SSDEEP
384:faFYntQXRH+ejPmMOC7Td/rWmnmPKo6FRo5Km8GOKHLVC4j6QYYGf:tnaReejPmzKmPoa5KgXVnmQ9S
Malware Config
Signatures
Files
-
65088f78dd7fc1e579c86c2793844784cba2338dd583aa191d9df3b7f1b66ffb.exe windows x86
6c8b008d7410d7c4467a85810e9bc818
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlFillMemory
GetDriveTypeA
GetAtomNameW
GetFileAttributesExW
GetMailslotInfo
RegisterWaitForSingleObject
FindVolumeMountPointClose
ReplaceFileA
GetQueuedCompletionStatus
lstrcmpW
VerSetConditionMask
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE