Static task
static1
Behavioral task
behavioral1
Sample
56b65480a014806e4609c62795077a61601fa1a859afa67432a379b8f09ac858.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
56b65480a014806e4609c62795077a61601fa1a859afa67432a379b8f09ac858.exe
Resource
win10v2004-20220901-en
General
-
Target
56b65480a014806e4609c62795077a61601fa1a859afa67432a379b8f09ac858
-
Size
87KB
-
MD5
dd2598bb742e17b11e3714c43ca1a9df
-
SHA1
6c370a4fe333c986c240cb5a71ac9b9585a13fc1
-
SHA256
56b65480a014806e4609c62795077a61601fa1a859afa67432a379b8f09ac858
-
SHA512
9870238e5bfbd5cca998922a7f1d207455199e9e439794f167fcfb3c962aeb47ecf96286cf251bd72eb01f1f512eaf6fde66feebaa5d8d87a37b315980035a28
-
SSDEEP
1536:sOej9NmDEm29ZIM7x1yag/RFFQblz+fLLnkC0Zb/pjOtq4U:PxDKH2R4RyPnC1lOtqB
Malware Config
Signatures
Files
-
56b65480a014806e4609c62795077a61601fa1a859afa67432a379b8f09ac858.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.looolo Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rzpasq Size: 52KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE