Static task
static1
Behavioral task
behavioral1
Sample
44b91ad850f2942b3cac3ec6241307870852c8f59e8fa9832462d3b849627c40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
44b91ad850f2942b3cac3ec6241307870852c8f59e8fa9832462d3b849627c40.exe
Resource
win10v2004-20220901-en
General
-
Target
44b91ad850f2942b3cac3ec6241307870852c8f59e8fa9832462d3b849627c40
-
Size
264KB
-
MD5
855d17e70f1616b3fcfe86f65391391a
-
SHA1
41fa62388686e04db4e7f382a2238d76e72a813d
-
SHA256
44b91ad850f2942b3cac3ec6241307870852c8f59e8fa9832462d3b849627c40
-
SHA512
356c342d522eda26cba5193a3b4d000084aa83bcd9af1d2ac74aa8db77909c755ccc5f19a1dd045287b8f366d012d74f16463351bd2d96f5394558d5fc9a5502
-
SSDEEP
3072:DFWGaFRvIAe0IQK1zwLvXH4P+JMDI+EnF9PXsadmvxfleCUVMVJKtOWFCbWDdpwc:DsdFZ3ehv1zY4ZDTUSx6dp8hGuKNQg
Malware Config
Signatures
Files
-
44b91ad850f2942b3cac3ec6241307870852c8f59e8fa9832462d3b849627c40.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 210KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE