Static task
static1
Behavioral task
behavioral1
Sample
9c525b0d018d7a4e1f7bda64df3742ea09c706066233e66053baeb00f7157c97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c525b0d018d7a4e1f7bda64df3742ea09c706066233e66053baeb00f7157c97.exe
Resource
win10v2004-20220812-en
General
-
Target
9c525b0d018d7a4e1f7bda64df3742ea09c706066233e66053baeb00f7157c97
-
Size
377KB
-
MD5
51119076abdc7a72309c3ddb5d131110
-
SHA1
b4ccacbfb55b5ed73c2155b92faab111449e8d7a
-
SHA256
9c525b0d018d7a4e1f7bda64df3742ea09c706066233e66053baeb00f7157c97
-
SHA512
7a50eb9bf9a5cef2bc40b56a5829eb95bd805f1068b1cd275df866d198cf736be7267ee5f21058947098f55960ba09f07c21120282ccf9a579d9e3f95db068da
-
SSDEEP
6144:beM4e5Xcpr3NbnHDIj4WtnECQcJlh+tvmfx9HzuefDCXs0ml5mtm7LlQFe8:iM4eZc93NbH3WFrnJlDfx9Hzuefn0M5L
Malware Config
Signatures
Files
-
9c525b0d018d7a4e1f7bda64df3742ea09c706066233e66053baeb00f7157c97.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 239KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
guocyok Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xpr01 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
guocyok Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ