Static task
static1
Behavioral task
behavioral1
Sample
858b1e73c4ff07df15437ab6c1cb3af0f1ea71d312ea468fb3b07641787f91b3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
858b1e73c4ff07df15437ab6c1cb3af0f1ea71d312ea468fb3b07641787f91b3.exe
Resource
win10v2004-20221111-en
General
-
Target
858b1e73c4ff07df15437ab6c1cb3af0f1ea71d312ea468fb3b07641787f91b3
-
Size
56KB
-
MD5
a08e5ce1cdd99c5def70f4c99f2b8987
-
SHA1
c46909cf69a44073cf101fc6253787111b27581b
-
SHA256
858b1e73c4ff07df15437ab6c1cb3af0f1ea71d312ea468fb3b07641787f91b3
-
SHA512
b1394393f3e0d035234c299e658d364201e6e9f6fa48fb8245d13913ea28c4c5c270c83a52cd0ef9be706a43a5d8bb44ebadaa73cffba5e09a2a3d03ae8c444d
-
SSDEEP
768:CNNNNNNKVn/E+g71ZFde9HGRU/8OexcvY7GtQX49gtk/er+ZC5Si83aVdnJXBQhG:CNNNNNN3MUmKXKgtuer+ZESExMh6kWZ
Malware Config
Signatures
Files
-
858b1e73c4ff07df15437ab6c1cb3af0f1ea71d312ea468fb3b07641787f91b3.exe windows x86
06f79e9a4e3f9214173df982f4d73d55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommModemStatus
FatalExit
UnlockFile
SetHandleInformation
LZOpenFileW
RemoveVectoredExceptionHandler
GetProfileIntW
SetMailslotInfo
CopyLZFile
QueueUserAPC
lstrcpynA
FindFirstVolumeA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE