Static task
static1
Behavioral task
behavioral1
Sample
27493f2a35c649a12c3227ccf2144250a25de3f8c61dddd4770e1575a04b5dbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27493f2a35c649a12c3227ccf2144250a25de3f8c61dddd4770e1575a04b5dbe.exe
Resource
win10v2004-20220812-en
General
-
Target
27493f2a35c649a12c3227ccf2144250a25de3f8c61dddd4770e1575a04b5dbe
-
Size
797KB
-
MD5
68caddf339660e8fe046660bf9a0b4a6
-
SHA1
dc346f5f3e1baf7da530b855d96412ac1127866b
-
SHA256
27493f2a35c649a12c3227ccf2144250a25de3f8c61dddd4770e1575a04b5dbe
-
SHA512
009dfda7b0d307544918ea046175266cacb99ff0ed8d4073f5df62cb5fad4ced5e5e657532e4fd150182f20674646425bfb9fcbe78f33efdececf7ba08fe05d2
-
SSDEEP
12288:Np+swvVMG99bhgG1yN83bIfmp+/YBq6SI8/yTNzSXr0h6lBf0Zr:rwnNhgG1O8rIf7wBqB/yTNzurnfcr
Malware Config
Signatures
Files
-
27493f2a35c649a12c3227ccf2144250a25de3f8c61dddd4770e1575a04b5dbe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 540KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QUIT_TEX Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MAIN_TEX Size: 4KB - Virtual size: 382B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT_TEX Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ERROR_TE Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DDEQT_TE Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DISPATCH Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
GRINIT_T Size: 4KB - Virtual size: 333B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lif Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE