Static task
static1
Behavioral task
behavioral1
Sample
be458693d028ddc87082c18a748c5cfc4699006a5d28cd0e0a3a916251525144.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be458693d028ddc87082c18a748c5cfc4699006a5d28cd0e0a3a916251525144.exe
Resource
win10v2004-20221111-en
General
-
Target
be458693d028ddc87082c18a748c5cfc4699006a5d28cd0e0a3a916251525144
-
Size
64KB
-
MD5
337ed2b2b557d62206d4bd130f4c7ee0
-
SHA1
1aa29f28fd2dbc7b691ffc011cf3a875871e835c
-
SHA256
be458693d028ddc87082c18a748c5cfc4699006a5d28cd0e0a3a916251525144
-
SHA512
f1d94057f2d229c683c86c6af42f7e08dc84e7a072e8564a4b928412bef451253ce99a98ebc6e3cca6862866d0180f52edd2d69138224b968743d32a3c05276e
-
SSDEEP
1536:oYOUiuceb+e5oy0uklMW+IiLMo0/Lc8Gl8oqKD:OzxeR0cW7iLMfLzf
Malware Config
Signatures
Files
-
be458693d028ddc87082c18a748c5cfc4699006a5d28cd0e0a3a916251525144.exe windows x86
ca0a4fc211fffd97ed876ced2ca2abd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetModuleHandleA
GetLocaleInfoA
IsBadStringPtrA
DeleteFileA
SetConsoleTitleA
GetModuleFileNameA
lstrcpyW
lstrcpyW
GetProcessHeap
lstrcpyW
lstrlenW
IsValidLocale
GetStartupInfoW
lstrcpyW
SetLastError
FindNextVolumeA
VirtualAllocEx
FindFirstVolumeA
CreateEventA
lstrcpyW
GetVolumePathNameW
GetStdHandle
untfs
Extend
ChkdskEx
Format
Recover
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RData Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ