Static task
static1
Behavioral task
behavioral1
Sample
28052b40dfa039a95bb4e94a148788ec94f424ea6a2122125fbe594667a4f416.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28052b40dfa039a95bb4e94a148788ec94f424ea6a2122125fbe594667a4f416.exe
Resource
win10v2004-20220812-en
General
-
Target
28052b40dfa039a95bb4e94a148788ec94f424ea6a2122125fbe594667a4f416
-
Size
150KB
-
MD5
d45c841613bbacfb3ef5ed9a5b8b026d
-
SHA1
02038cf4827b527e40eaf9ca55a3cf5677de1211
-
SHA256
28052b40dfa039a95bb4e94a148788ec94f424ea6a2122125fbe594667a4f416
-
SHA512
611e894286973fa950a190d587423b02ba509636e7db90485995323c1d1629e64f7b91ac2bbe4ec787fc601e936955ab13d1019f58d4dfa9ff9e4d5ee44ad309
-
SSDEEP
3072:xwFLsFwUlUvxbZvzJhpcaI9TPZWmU+AYjakjU:qFLsXuxbZvzPpcHTZnDk
Malware Config
Signatures
Files
-
28052b40dfa039a95bb4e94a148788ec94f424ea6a2122125fbe594667a4f416.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 140KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE