Static task
static1
Behavioral task
behavioral1
Sample
d8a16e8046ac454ae8b50ac2521d2260147f256ca0f55ac795c4591fc34957b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8a16e8046ac454ae8b50ac2521d2260147f256ca0f55ac795c4591fc34957b5.exe
Resource
win10v2004-20220901-en
General
-
Target
d8a16e8046ac454ae8b50ac2521d2260147f256ca0f55ac795c4591fc34957b5
-
Size
131KB
-
MD5
79610936c9e9795a141a35f8df1fdb40
-
SHA1
c32c37e7f44e0858b3f27c58bc66c01d87fde0e6
-
SHA256
d8a16e8046ac454ae8b50ac2521d2260147f256ca0f55ac795c4591fc34957b5
-
SHA512
a6338b10902864361917d9a18180f0d0c90f00f0dc9ea0e893536f7cc7d9879d878eb6090afaad3f1a906d73162444ed927f0f2c61909a0471d5cb6f8cc51949
-
SSDEEP
3072:h/h5LY2nN/IB+LynzmIBkKYbT0Uj1Gb8lf2B9yxkFCoiKCLOUp:hUEQYLynzZCX00iofFxkFju
Malware Config
Signatures
Files
-
d8a16e8046ac454ae8b50ac2521d2260147f256ca0f55ac795c4591fc34957b5.exe windows x86
3c6e5793e514214727b5614fbe758755
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 444B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ