Static task
static1
Behavioral task
behavioral1
Sample
d3f80ebec40d7c729b87c19bd8f1760a8ec88228839e7d408d571b1577b2b776.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
d3f80ebec40d7c729b87c19bd8f1760a8ec88228839e7d408d571b1577b2b776.exe
Resource
win10v2004-en-20220112
General
-
Target
d3f80ebec40d7c729b87c19bd8f1760a8ec88228839e7d408d571b1577b2b776
-
Size
15KB
-
MD5
ae3aab90f69a05b131bd76abe8a5a988
-
SHA1
e4b09d053f6d0d95a318a552fc69291874a166c9
-
SHA256
d3f80ebec40d7c729b87c19bd8f1760a8ec88228839e7d408d571b1577b2b776
-
SHA512
2c411bf12e79e8620c1188147d6d5d0b06877ad5c60b1043e0d13a8e508dfcf85e95f3691fcd12081d60db42bc3bcf8ef00837318559fe6aac3da34e406ec714
-
SSDEEP
384:Pu28xxYk0fn6k4gdTvqvlWE+9lXXnXLsUVDVDVDVDVEe:PuF2BfnlDqtWEenXJVDVDVDVDVv
Malware Config
Signatures
Files
-
d3f80ebec40d7c729b87c19bd8f1760a8ec88228839e7d408d571b1577b2b776.exe windows x86
77e20d42da8acdf51b54c64c30f78c5d
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
ExitProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
RtlZeroMemory
Sleep
lstrcatA
Sections
.flat Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.api Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE