Static task
static1
Behavioral task
behavioral1
Sample
36e785129e62720d68c3a74e0413a2b998db7a7a797f24687b16f668847e5455.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
36e785129e62720d68c3a74e0413a2b998db7a7a797f24687b16f668847e5455.exe
Resource
win10v2004-en-20220112
General
-
Target
36e785129e62720d68c3a74e0413a2b998db7a7a797f24687b16f668847e5455
-
Size
1.8MB
-
MD5
5d3e6721fd27e7b56579dcb6f76e4967
-
SHA1
d121a2717472d5f4631ca0b5e766a3e349871178
-
SHA256
36e785129e62720d68c3a74e0413a2b998db7a7a797f24687b16f668847e5455
-
SHA512
ee0b641df5f9383c3f3444bbaae06155c5a72fba1d107360cd5d4f1d54336b4ede90f6a009f06284264c6ebc679bfdb46a0f24a605f26c1ea1a43d70321d4390
-
SSDEEP
49152:obyQeopUj20O/v8A/CT41/FNPv8hp9dhiqNsuZT3tXzlSLjE:KHgrOctGNchp9nRNsURzl84
Malware Config
Signatures
Files
-
36e785129e62720d68c3a74e0413a2b998db7a7a797f24687b16f668847e5455.exe windows x86
3ce8605f4572d09027ece14b34fde472
Code Sign
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualFree
Sections
Size: 18KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgqlrrpa Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zuhhlwry Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE