Static task
static1
Behavioral task
behavioral1
Sample
a4d3b9ed5469d06bb5e64fa6f744f2e500d4f24e92f219ba111c87b56d0ed85a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a4d3b9ed5469d06bb5e64fa6f744f2e500d4f24e92f219ba111c87b56d0ed85a.exe
Resource
win10v2004-20220812-en
General
-
Target
a4d3b9ed5469d06bb5e64fa6f744f2e500d4f24e92f219ba111c87b56d0ed85a
-
Size
212KB
-
MD5
10aaf707f26339b2f2058dadc8e1b760
-
SHA1
419a3f473bf88c57dff250af7cad28e8dac51e35
-
SHA256
a4d3b9ed5469d06bb5e64fa6f744f2e500d4f24e92f219ba111c87b56d0ed85a
-
SHA512
c09becdad70042d05061fa22cdc3e4d2f11502852e217f36d76378a6704bebf7bb69cf16335f496f2c74c00a445e44414979fb07b817433ce5cf0a8c607e7641
-
SSDEEP
1536:QOMAREj2OlPmLLsqlA+/QRx//9gkp2sVVvBJxV4W2pRSAD8GXN+I7fJ+aCl1fenx:Q9j2Wm8HF19gy5Jq7zoI7h+aS1Gnx
Malware Config
Signatures
Files
-
a4d3b9ed5469d06bb5e64fa6f744f2e500d4f24e92f219ba111c87b56d0ed85a.exe windows x86
925b5b6ab55c2b01631127097a6fbabd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rsdeploy
Reloc
Initialize
ResolveImportDLL
mscoree
GetCORSystemDirectory
kernel32
VirtualProtect
GetModuleFileNameA
LoadLibraryExA
LoadLibraryA
GetProcAddress
GetVersionExA
FreeLibrary
Sections
.text Size: 4KB - Virtual size: 790B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ