Static task
static1
Behavioral task
behavioral1
Sample
1fd269e800ee008f26143e6b2880b7890c6f74abff65d8162c2e279d66441981.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1fd269e800ee008f26143e6b2880b7890c6f74abff65d8162c2e279d66441981.exe
Resource
win10v2004-20220901-en
General
-
Target
1fd269e800ee008f26143e6b2880b7890c6f74abff65d8162c2e279d66441981
-
Size
296KB
-
MD5
732c329022af10adbcab5913cdc8eb66
-
SHA1
1d091d85d00d54835df2f760d8c10cc4b988bf59
-
SHA256
1fd269e800ee008f26143e6b2880b7890c6f74abff65d8162c2e279d66441981
-
SHA512
1db58dacbb70798b82160a2a6267cf53a1e143511aca8755ad884be88ddaf53261f4759248aed2dc77db16fb2bb156ed3ca18fea4db3eb95386a621d9ae78a45
-
SSDEEP
6144:NQe7uTK0t+1RjLPvo2khl0bO9ulzkSnlrCPNw:NriWbRHPwVIkSnlC1w
Malware Config
Signatures
Files
-
1fd269e800ee008f26143e6b2880b7890c6f74abff65d8162c2e279d66441981.exe windows x86
55b099990cbb00fed41881dd2fcc9b1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAllocEx
Sections
CODE Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ