Static task
static1
Behavioral task
behavioral1
Sample
8108148f08e90e6cb1305b86f2d69776b1db27b6a08e8674b248f0fced1ddfed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8108148f08e90e6cb1305b86f2d69776b1db27b6a08e8674b248f0fced1ddfed.exe
Resource
win10v2004-20220812-en
General
-
Target
8108148f08e90e6cb1305b86f2d69776b1db27b6a08e8674b248f0fced1ddfed
-
Size
219KB
-
MD5
60728a2086559715f489150ebe4fe7d0
-
SHA1
bc8883b42cf3d189d8596cd724c48eba4035af67
-
SHA256
8108148f08e90e6cb1305b86f2d69776b1db27b6a08e8674b248f0fced1ddfed
-
SHA512
9635a969e3e62fe1ed3af497f1a7355f76d2c0f65b141b1fe96eb3f23dac5de706c4521bb89f257d3e921c3c055607ec7336ef30c4579e64680163915dfd6671
-
SSDEEP
6144:aDGcinz/wgwRFfCRu9DohA9SGu5d4FeXJXi9NV:aDGcezIgoBCKkg7Feo9
Malware Config
Signatures
Files
-
8108148f08e90e6cb1305b86f2d69776b1db27b6a08e8674b248f0fced1ddfed.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 167KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ngqreks Size: 4KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE