Static task
static1
Behavioral task
behavioral1
Sample
b36c8ebb4ac9daba70fa0f64f7633beabe1d79bc8972be7dad1cbedc3fdb0d62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b36c8ebb4ac9daba70fa0f64f7633beabe1d79bc8972be7dad1cbedc3fdb0d62.exe
Resource
win10v2004-20220901-en
General
-
Target
b36c8ebb4ac9daba70fa0f64f7633beabe1d79bc8972be7dad1cbedc3fdb0d62
-
Size
207KB
-
MD5
5e79b9774dee230c89d7f04ad1f91510
-
SHA1
dcf2e66790e878044765f4b71ebb08bb46a7e2e8
-
SHA256
b36c8ebb4ac9daba70fa0f64f7633beabe1d79bc8972be7dad1cbedc3fdb0d62
-
SHA512
db92fc1e242f36e42dfc6a58a20cf00d0da919f6c5cd68934740c3442f37016f1f9a8c2b32b512e454d2504ec829e61fd884f2185b72927c5bee88f4a51f6cf6
-
SSDEEP
6144:Tmbvh5g760WiCBjT2/4n7/YHXAQCGinsdNN:TmzPe60D8f2/4nrS+sdn
Malware Config
Signatures
Files
-
b36c8ebb4ac9daba70fa0f64f7633beabe1d79bc8972be7dad1cbedc3fdb0d62.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 200KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE