Static task
static1
Behavioral task
behavioral1
Sample
b645a3e3bd0a804aa5ad9ed4e028400c18b3c7697171e83fd42e60c60e6e83e3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b645a3e3bd0a804aa5ad9ed4e028400c18b3c7697171e83fd42e60c60e6e83e3.exe
Resource
win10v2004-20220812-en
General
-
Target
b645a3e3bd0a804aa5ad9ed4e028400c18b3c7697171e83fd42e60c60e6e83e3
-
Size
251KB
-
MD5
6132ff74717c6f7288f328e2664d8370
-
SHA1
9b7405030f54cd01154b695273330e143a4f0e37
-
SHA256
b645a3e3bd0a804aa5ad9ed4e028400c18b3c7697171e83fd42e60c60e6e83e3
-
SHA512
8e5ae16ca903ca4cc57a3b743a27245a30f7686eee5f7473dc7a452b15334fcc6f55a1b4c71ff1cba631ac85b15bb59ddf3b97b289c6209084a02e2e1fddd6ca
-
SSDEEP
6144:CAy6zzmT2vPVj/KTbKOSIomuiGjnMrpbjl7Kio0pvv:7jzzyim2p2wnMrHoYv
Malware Config
Signatures
Files
-
b645a3e3bd0a804aa5ad9ed4e028400c18b3c7697171e83fd42e60c60e6e83e3.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 7KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 240KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE