Static task
static1
Behavioral task
behavioral1
Sample
2e1afb80cdbd5db72e40ede22579e80f63a4d0491d5bd0fefe44facc0ce4de9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e1afb80cdbd5db72e40ede22579e80f63a4d0491d5bd0fefe44facc0ce4de9c.exe
Resource
win10v2004-20220812-en
General
-
Target
2e1afb80cdbd5db72e40ede22579e80f63a4d0491d5bd0fefe44facc0ce4de9c
-
Size
262KB
-
MD5
6d70321bac46bf2048509663b68b86e3
-
SHA1
7018f4a0f32ca2e8eb66924c4302f7e58aab4988
-
SHA256
2e1afb80cdbd5db72e40ede22579e80f63a4d0491d5bd0fefe44facc0ce4de9c
-
SHA512
ac77161472b81ccd8ed43110323bcadc5de80288b4cb76f266d2e0a67f86d66d8671f7dc1138ba5a967fdfc5af7dcb127793f1ac36d0b392b9694807e64ebcd1
-
SSDEEP
3072:maG2ljvQcTjvn2hjgEPDFvJ983T2HofbjgEWBIoIVVns1diCwuQwGeOly4UHUxED:mSNVTje5gEPhA3TXH3VstpgeOlS9
Malware Config
Signatures
Files
-
2e1afb80cdbd5db72e40ede22579e80f63a4d0491d5bd0fefe44facc0ce4de9c.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 126KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE