Static task
static1
Behavioral task
behavioral1
Sample
128016bf5cbe53a856bc6def08cd73134bc5aec3557bb624ae3715461430e333.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
128016bf5cbe53a856bc6def08cd73134bc5aec3557bb624ae3715461430e333.exe
Resource
win10v2004-20220901-en
General
-
Target
128016bf5cbe53a856bc6def08cd73134bc5aec3557bb624ae3715461430e333
-
Size
107KB
-
MD5
712e40f91bbeb077fa94b529d3b475b1
-
SHA1
3a84b249fdc0199b5e0caefe0fe333a2f3b3aa33
-
SHA256
128016bf5cbe53a856bc6def08cd73134bc5aec3557bb624ae3715461430e333
-
SHA512
9a90b8d51a75c35cf055c79c715dff898701c4ecc0711ae47f7fd232988450b2c772f936151d82ea2b7da0c5e9a3cca0099c770447443f2a5a52960c80e6fc0a
-
SSDEEP
1536:XN6EzsNFEfg2XEd6Lt+rEQx3H+asjIMZ8pi42OySRtywTYIO0fWvCrR3SI:324g2Vs3H+aq8kylGHMuvoS
Malware Config
Signatures
Files
-
128016bf5cbe53a856bc6def08cd73134bc5aec3557bb624ae3715461430e333.exe windows x86
f5e31bdce6e279805c97fa629d869d64
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
Sleep
VirtualAlloc
SetCurrentDirectoryA
VirtualFree
ExitProcess
Sections
.text Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ