Static task
static1
Behavioral task
behavioral1
Sample
52deb0002a8bd1b3ded02ccbcdc72c718cc368a0446bb791e5ec92ac39c71f02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52deb0002a8bd1b3ded02ccbcdc72c718cc368a0446bb791e5ec92ac39c71f02.exe
Resource
win10v2004-20220812-en
General
-
Target
52deb0002a8bd1b3ded02ccbcdc72c718cc368a0446bb791e5ec92ac39c71f02
-
Size
84KB
-
MD5
989e01e4cdcb771f83b6b077873d38e7
-
SHA1
2f7d3a4ce797dad97d6f6b248977b02e0389d96c
-
SHA256
52deb0002a8bd1b3ded02ccbcdc72c718cc368a0446bb791e5ec92ac39c71f02
-
SHA512
81a1242fb29e5b35665b6d58d6e5302fbee0041a2add39bab050bbaf35ddf65776f165cc5fdaf95d6a7e297cc5eae08830fc585e293834ae07cc5e1405ef0803
-
SSDEEP
1536:o+IsstEsCDoBJi0/5aUUr5dVIBNGK+Vd6dPD4HtqsFN4JY3BfGz:RszCkq0haU6vYG1H6dPDJM4JYy
Malware Config
Signatures
Files
-
52deb0002a8bd1b3ded02ccbcdc72c718cc368a0446bb791e5ec92ac39c71f02.exe windows x86
5b08fa2ef203a2f97810f6e1b64b6577
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
VirtualAlloc
VirtualFree
GetCommandLineA
Sections
.text Size: 80KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ