Static task
static1
Behavioral task
behavioral1
Sample
11efd49541ea418f4b1e8250b9b2dd4965eba8b8eda119239649fbc65e5da269.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
11efd49541ea418f4b1e8250b9b2dd4965eba8b8eda119239649fbc65e5da269.exe
Resource
win10v2004-20220901-en
General
-
Target
11efd49541ea418f4b1e8250b9b2dd4965eba8b8eda119239649fbc65e5da269
-
Size
49KB
-
MD5
6d0c58eee01249f795e08320b3246518
-
SHA1
9f5cf176bc98657e35c5527c1f1c9ec75333da52
-
SHA256
11efd49541ea418f4b1e8250b9b2dd4965eba8b8eda119239649fbc65e5da269
-
SHA512
6f1774a1268821dbe8c04d58e4366ed3932c20c1fd7eb2fec64273a97b3bdc3dd6dac8f8aee9ad6f6b9f682cf0495601814021d045f411334241c862df13a019
-
SSDEEP
768:Df4KiEEsmXM7NyCjP7snwwCcZ3CBzUi0J4CkC5HVYPC:DQztHeQnEe+0JlHyP
Malware Config
Signatures
Files
-
11efd49541ea418f4b1e8250b9b2dd4965eba8b8eda119239649fbc65e5da269.exe windows x86
bd61a30def883b147729b6e0387c973f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
advapi32
RegOpenKeyA
RegOpenKeyW
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ