Static task
static1
Behavioral task
behavioral1
Sample
f19ceeb7465f616ba0de519e4d212986dfea96933d1c0c17eff7a22fe97c0a32.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f19ceeb7465f616ba0de519e4d212986dfea96933d1c0c17eff7a22fe97c0a32.exe
Resource
win10v2004-20221111-en
General
-
Target
f19ceeb7465f616ba0de519e4d212986dfea96933d1c0c17eff7a22fe97c0a32
-
Size
116KB
-
MD5
1402546316f988de68a5c6cca5303557
-
SHA1
be00d656b5bba046d343da2b1b7c32e498f8013c
-
SHA256
f19ceeb7465f616ba0de519e4d212986dfea96933d1c0c17eff7a22fe97c0a32
-
SHA512
8df8ad64e39e57b5abe2738b0ba697fb98b095a6ca1386e95dac93579c3d14bab968debfdc0b9e1d52e2ce86d00d2721e67aa547a0fca5c5e4415eaf395354c6
-
SSDEEP
3072:x83onUtElmGigOO6Om14TBnhp5uUaqwaef14pvAMWs:QonwE4GiTO+othHd6yW
Malware Config
Signatures
Files
-
f19ceeb7465f616ba0de519e4d212986dfea96933d1c0c17eff7a22fe97c0a32.exe windows x86
c4b37496f53abaff0013ef412395ec5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetQueuedCompletionStatus
GetNumberOfConsoleInputEvents
GetProcAddress
GetFileAttributesExA
FlushViewOfFile
GetProcAddress
FindCloseChangeNotification
CallNamedPipeA
lstrcmpA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.rc3sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc3sec1 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec2 Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ