Static task
static1
Behavioral task
behavioral1
Sample
d25d6cd207ae1de4d1cb9288b55d7413f1b4b4a7300767ac59b512cbbae158f9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d25d6cd207ae1de4d1cb9288b55d7413f1b4b4a7300767ac59b512cbbae158f9.exe
Resource
win10v2004-20220812-en
General
-
Target
d25d6cd207ae1de4d1cb9288b55d7413f1b4b4a7300767ac59b512cbbae158f9
-
Size
66KB
-
MD5
7c53d257057cbdc85c361686bd98ca2b
-
SHA1
9fb7ad84c71cf86b693054423c3dca5b118dd86f
-
SHA256
d25d6cd207ae1de4d1cb9288b55d7413f1b4b4a7300767ac59b512cbbae158f9
-
SHA512
98fdd9e4ca429a275052afbae3ab786c70fb0b3d8a1ea259cb97ade7a7ebb2073a0c703c94f3b6da57f6981f759f691f5b5bac619f97e8f71c2bd7b2a86980ae
-
SSDEEP
1536:REQr8Hz7UJLYoypJ91xYtg4NPFHramIwQZ0Z3/YYKdaC6uiLS7v4:yHXckoyV1xYtXlVIwJZ3gYKZ6unA
Malware Config
Signatures
Files
-
d25d6cd207ae1de4d1cb9288b55d7413f1b4b4a7300767ac59b512cbbae158f9.exe windows x86
8c91214606ebf5b64e37d80f425d3e07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNumaAvailableMemoryNode
GetNumaAvailableMemoryNode
WinExec
RtlZeroMemory
GetComputerNameExW
CreateFileMappingW
AssignProcessToJobObject
lstrcmpA
lstrcpynW
DosPathToSessionPathA
ExpandEnvironmentStringsW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE