Static task
static1
Behavioral task
behavioral1
Sample
ce34e03784635383243e8a34d031652b8089b151cc892b2d6b0335f1a9d42523.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce34e03784635383243e8a34d031652b8089b151cc892b2d6b0335f1a9d42523.exe
Resource
win10v2004-20221111-en
General
-
Target
ce34e03784635383243e8a34d031652b8089b151cc892b2d6b0335f1a9d42523
-
Size
164KB
-
MD5
a2249bb222eb111fa94acee7d67d5c6d
-
SHA1
42143677b7008a4bc8242afbf93e821677153ebc
-
SHA256
ce34e03784635383243e8a34d031652b8089b151cc892b2d6b0335f1a9d42523
-
SHA512
322793f766d1a5b0899909b4a320ccc7f36bcb523d2d7564d3e9129a6f7d4a86edb0db6c9e575f4839d81889487459404854f0d7a91634598e64f64929bfb272
-
SSDEEP
3072:o7PNm2pinnO1sVl7ZSXfhD4jtkUUyQmpetp3WA6NQfP3m3dl2GmJN+e:opHInnQ2dZch8RkUUyQmAtp3Z6NQX3Mq
Malware Config
Signatures
Files
-
ce34e03784635383243e8a34d031652b8089b151cc892b2d6b0335f1a9d42523.exe windows x86
d740c6b869dac154ef6e51097ce3173a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
VirtualFree
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
OpenFileMappingA
FlushFileBuffers
Sleep
GetProcAddress
CreateFileA
ReleaseMutex
user32
RegisterClassA
LoadAcceleratorsA
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 205KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE