Static task
static1
Behavioral task
behavioral1
Sample
618f286fa81a80fbff453c4edd1a8c831febabbfd103084c0f0c2f1444c3ca06.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
618f286fa81a80fbff453c4edd1a8c831febabbfd103084c0f0c2f1444c3ca06.exe
Resource
win10v2004-20220901-en
General
-
Target
618f286fa81a80fbff453c4edd1a8c831febabbfd103084c0f0c2f1444c3ca06
-
Size
92KB
-
MD5
4f83de1cadf0d48cbc57a22c68ca0850
-
SHA1
18bb816c01761718498ad1995d824f8aafe99780
-
SHA256
618f286fa81a80fbff453c4edd1a8c831febabbfd103084c0f0c2f1444c3ca06
-
SHA512
8178158d9a3498c50709d3c46f63f01cea639826eace5f0b67a3ad3399a13391b0c976f0051f19add524605bdde91875ffbb7e547166ac37a5aa96748bf4eaab
-
SSDEEP
1536:Ry+x6dS8vBq3QNH4d/iL8i2yGuS6uaQxhsHg423sNDTFJc:RWI8pF4ZDulutx+LcsFTE
Malware Config
Signatures
Files
-
618f286fa81a80fbff453c4edd1a8c831febabbfd103084c0f0c2f1444c3ca06.exe windows x86
c7a95e281eadf7c28840de8751e6c0f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAllocEx
LoadLibraryA
GetProcAddress
user32
LoadCursorA
LoadIconA
advapi32
RegOpenKeyExA
Sections
.text3 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ