Static task
static1
Behavioral task
behavioral1
Sample
5668202f387614ef3e307caf4e40e050a9032dbe840561c5a04cb7e030f89155.exe
Behavioral task
behavioral2
Sample
5668202f387614ef3e307caf4e40e050a9032dbe840561c5a04cb7e030f89155.exe
Resource
win10v2004-20220901-en
General
-
Target
5668202f387614ef3e307caf4e40e050a9032dbe840561c5a04cb7e030f89155
-
Size
31KB
-
MD5
79d6c0c83550eb0c9bfad267d98dc844
-
SHA1
da8e09c247b9d0c691331239ce2dbafcadd96ad2
-
SHA256
5668202f387614ef3e307caf4e40e050a9032dbe840561c5a04cb7e030f89155
-
SHA512
87dee7699e30887511e4d0b254e624ea1f840b71e3b2d41e2544bb8c211b8eecd65dc2651a8653be8eb15b8789e62ae1e1877ffae6af1f8ec5f2e0e0d908c017
-
SSDEEP
768:Bt3L3UBJtppL9KKGub/ikyU+OQuehcuiQKx:Bt3bUXtHLRzB+bcuil
Malware Config
Signatures
Files
-
5668202f387614ef3e307caf4e40e050a9032dbe840561c5a04cb7e030f89155.exe windows x86
fe999ead217810b0f8f9f56da8450be1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualProtect
ExitProcess
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ