Static task
static1
Behavioral task
behavioral1
Sample
0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad.exe
Resource
win7-20220414-en
General
-
Target
0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad
-
Size
2.1MB
-
MD5
011eca360bcae358ca1ebf28d2cfb0cc
-
SHA1
95a9e2b240dfafc760b9c84e20c53d89632761c1
-
SHA256
0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad
-
SHA512
46d6aa457c9a328ce0206348d43244685be06da27ad58c36810417526308a8bb77f608f8c3781018dd8b43e944f65c625166f672e0d3c6a98b2c7356ca3acd80
-
SSDEEP
49152:hiTs4zVKrHJPuCcGtlXavuxT+0TMZ0mrEhcleA:hiZz0uutovq3MymrEhj
Malware Config
Signatures
Files
-
0f1619d2878b47decac0eb4f25fae469623b3e41ae8564e7061ca464e95707ad.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 2.0MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE