Static task
static1
Behavioral task
behavioral1
Sample
8d6a64f38e6f3f428f93e3e74f5fda319479b6295f46a83fd1c3aace32350764.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8d6a64f38e6f3f428f93e3e74f5fda319479b6295f46a83fd1c3aace32350764.exe
Resource
win10v2004-20220812-en
General
-
Target
8d6a64f38e6f3f428f93e3e74f5fda319479b6295f46a83fd1c3aace32350764
-
Size
511KB
-
MD5
4a944a2da4e410208a372a801d0f5e80
-
SHA1
e4b3062d1c409c1be1cd3e0f34301092bdd57339
-
SHA256
8d6a64f38e6f3f428f93e3e74f5fda319479b6295f46a83fd1c3aace32350764
-
SHA512
ee2a1aeb55b4bac6920771854ee72b92954fe70cc7f9e1fe4a42f76e0f459e9d910ab29ef353cb5c1c475006d665f04a47406bf1d8d56623a7206e5bc2255d41
-
SSDEEP
12288:bnvjnEl2QTrzf5MRzWujYmIK/mqulRqmpY/6jphV9:362Q3ziWwYdR351H
Malware Config
Signatures
Files
-
8d6a64f38e6f3f428f93e3e74f5fda319479b6295f46a83fd1c3aace32350764.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 452KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE