Static task
static1
Behavioral task
behavioral1
Sample
797deb4127e9a4f8f7f3fd0c918d4700f554fde6881f21fabd4c3ba85b31d6a2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
797deb4127e9a4f8f7f3fd0c918d4700f554fde6881f21fabd4c3ba85b31d6a2.exe
Resource
win10v2004-20220812-en
General
-
Target
797deb4127e9a4f8f7f3fd0c918d4700f554fde6881f21fabd4c3ba85b31d6a2
-
Size
854KB
-
MD5
b39d8761d7293877e2065cb26a47d3e8
-
SHA1
cef914aa32096c03e4cc136c45e5ce7ac5b0c268
-
SHA256
797deb4127e9a4f8f7f3fd0c918d4700f554fde6881f21fabd4c3ba85b31d6a2
-
SHA512
2092699a16667dcef6610ac62a229390f5b4d73cfcca96ca505d4470063ee6f944710114718c9090224fe2e3c88b971ce3c829c79e6889a9e4e56f0c18fd63b9
-
SSDEEP
3072:M9MTVmddoI/Z3eCd94T5OWyIFGV02apfrriaTiQRVpos:M2AToI/Z3mNZyMrOaTiQjp
Malware Config
Signatures
Files
-
797deb4127e9a4f8f7f3fd0c918d4700f554fde6881f21fabd4c3ba85b31d6a2.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 123KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WYCao Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WYCao Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WYCao Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.WYCao Size: 6KB - Virtual size: 4096.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ