Static task
static1
Behavioral task
behavioral1
Sample
b3d6c20f2bd4e2885d0c4110f20777fa21304521b48a371c3dff51212343e04d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3d6c20f2bd4e2885d0c4110f20777fa21304521b48a371c3dff51212343e04d.exe
Resource
win10v2004-20220901-en
General
-
Target
b3d6c20f2bd4e2885d0c4110f20777fa21304521b48a371c3dff51212343e04d
-
Size
449KB
-
MD5
4b0499f13e93d3ca3eb99dea5dfd6838
-
SHA1
47256ec3d5dd81cad90f26dcea0aff76533210f8
-
SHA256
b3d6c20f2bd4e2885d0c4110f20777fa21304521b48a371c3dff51212343e04d
-
SHA512
d59d6c9f0813137fd3ba9161c714425ad6319029e891d00b1441cb2865f4b6aa0f740e374797617ffdd9a20c52f92f9b6563cc85bf26210166dda5bf83783d0d
-
SSDEEP
12288:hLXWRiawVhjBjPtBEIDwbT64wluuiV8bzfHB9uyfLFo:NXWk5PBj4T6vlut+zfh9uaO
Malware Config
Signatures
Files
-
b3d6c20f2bd4e2885d0c4110f20777fa21304521b48a371c3dff51212343e04d.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 440KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE