Static task
static1
Behavioral task
behavioral1
Sample
f27ba3078ed05904f03fd253339d2ea05198a8c4d1d26cda1236478c1004dad1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f27ba3078ed05904f03fd253339d2ea05198a8c4d1d26cda1236478c1004dad1.exe
Resource
win10v2004-20220812-en
General
-
Target
f27ba3078ed05904f03fd253339d2ea05198a8c4d1d26cda1236478c1004dad1
-
Size
86KB
-
MD5
7c61160a8f73e7f2bbda908a6d4a36e0
-
SHA1
017534f8c83976ccf3479f2a21447142999f5aa1
-
SHA256
f27ba3078ed05904f03fd253339d2ea05198a8c4d1d26cda1236478c1004dad1
-
SHA512
a658575038871ae5cc6f9369b6677f5373c71a06cd18930a7af4e8a2ef581035184c0684c429f14d376fa35b29cce35be0b4a19b9a7f875acf9cfb6b17c1f753
-
SSDEEP
1536:tJzte7aVoxagfKLO7RIvTbJHO4akynOSqds7dV1BYqDaM7CVelydNRNl:jztsaR3uI7bJ7Sqd+6qeel
Malware Config
Signatures
Files
-
f27ba3078ed05904f03fd253339d2ea05198a8c4d1d26cda1236478c1004dad1.exe windows x86
66e18d30d2698596a80d8cf1a91ce450
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
GetSystemDirectoryA
GetCurrentThread
CreateMutexA
GetCurrentDirectoryA
GetCurrentThreadId
GetVersionExA
GetWindowsDirectoryA
GetCurrentProcess
LocalFree
ExitProcess
SleepEx
VirtualAlloc
LocalAlloc
GetCurrentProcessId
GetStdHandle
GetComputerNameA
advapi32
GetUserNameA
user32
GetSystemMetrics
GetActiveWindow
GetForegroundWindow
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ