Static task
static1
Behavioral task
behavioral1
Sample
dfb0e863ebdde0cb9ce173624e7fcec05946401551bc691ffcc1e8946b757d71.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfb0e863ebdde0cb9ce173624e7fcec05946401551bc691ffcc1e8946b757d71.exe
Resource
win10v2004-20220812-en
General
-
Target
dfb0e863ebdde0cb9ce173624e7fcec05946401551bc691ffcc1e8946b757d71
-
Size
265KB
-
MD5
6da1f7a96c62b57428f7dd9eff5c754c
-
SHA1
889c6c21226725b93030edf54908a2036c9f286e
-
SHA256
dfb0e863ebdde0cb9ce173624e7fcec05946401551bc691ffcc1e8946b757d71
-
SHA512
5cec92e3434eb2306662b79a2f4e500616ebbf30af837074c11b4637c9d4b550caf80d199637e44a0268096b95f5974c9a2a77b4b29847a4d884d61bd0869381
-
SSDEEP
6144:lVBrtcVX+rtJjo3SH1J/kTqYZhMBIljfidbaDKhMT:DBrAurfV1kTqbKj6dCWMT
Malware Config
Signatures
Files
-
dfb0e863ebdde0cb9ce173624e7fcec05946401551bc691ffcc1e8946b757d71.exe windows x86
55b099990cbb00fed41881dd2fcc9b1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAllocEx
Sections
CODE Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ