Static task
static1
Behavioral task
behavioral1
Sample
0be5e2622effb7de2ffa5d9843c6a8cd2f0634110d7a664e0e1b86a6ec218dcd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0be5e2622effb7de2ffa5d9843c6a8cd2f0634110d7a664e0e1b86a6ec218dcd.exe
Resource
win10v2004-20220812-en
General
-
Target
0be5e2622effb7de2ffa5d9843c6a8cd2f0634110d7a664e0e1b86a6ec218dcd
-
Size
64KB
-
MD5
399d632907f6c06d27f9f4984375b0e0
-
SHA1
6cedb064c1023fe2e6b5290d0b243e9c11927ba5
-
SHA256
0be5e2622effb7de2ffa5d9843c6a8cd2f0634110d7a664e0e1b86a6ec218dcd
-
SHA512
a39eb9e98de20b0f377542be49477ddfa6ef7437ea920528325c03a7f5a2dd5b24ba04fc10e8d2632f086cb743d6a42be1d177c07bf64d2d52508a6a1233e824
-
SSDEEP
1536:0Wrov3aBT/3igNlh+Lu0yyYl6k22w1GV:HEfOz3igN8s6k2
Malware Config
Signatures
Files
-
0be5e2622effb7de2ffa5d9843c6a8cd2f0634110d7a664e0e1b86a6ec218dcd.exe windows x86
7547384e142acd70515fac376ae3eec5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
GetProcessHeap
GetModuleFileNameA
FindNextVolumeA
FindFirstVolumeA
GetModuleHandleA
IsBadStringPtrA
lstrcpyW
GetVolumePathNameW
lstrcpyW
IsValidLocale
SetLastError
GetLocaleInfoA
VirtualAllocEx
SetConsoleTitleA
SetCurrentDirectoryA
lstrcpyW
lstrcpyW
lstrlenW
GetStartupInfoW
DeleteFileA
CreateEventA
GetStdHandle
untfs
Format
Recover
Extend
ChkdskEx
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RData Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Adata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ