Static task
static1
Behavioral task
behavioral1
Sample
d89fa91320a127ca27ebf0d2a96e27c18d7fbc90a6023016033a54471888e29d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d89fa91320a127ca27ebf0d2a96e27c18d7fbc90a6023016033a54471888e29d.exe
Resource
win10v2004-20220812-en
General
-
Target
d89fa91320a127ca27ebf0d2a96e27c18d7fbc90a6023016033a54471888e29d
-
Size
12KB
-
MD5
70e18bd9662428fd25a84b43bc224c5d
-
SHA1
b257b55a2dcd2e99f5c4a5e5ce8638bd4c5b4f88
-
SHA256
d89fa91320a127ca27ebf0d2a96e27c18d7fbc90a6023016033a54471888e29d
-
SHA512
ac9d2f8203eef514ea6bcd2aa63f37381cdb7f53ccdc4ef2df4e76949689c0cac8d69ce10b2fd678596e4ce04d9be955c38d482f874c77fbd6d9535b9cb1b6be
-
SSDEEP
192:nWJqIXsP18touF3lcfFf5yqG9HLSX92S0DGqr5o6:WJqis9QlcffyqaeQj9
Malware Config
Signatures
Files
-
d89fa91320a127ca27ebf0d2a96e27c18d7fbc90a6023016033a54471888e29d.exe windows x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE