Static task
static1
Behavioral task
behavioral1
Sample
d61438e6bdc003e90c86b6167079045a46a7cb21b6566b336d847c8161c6322f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d61438e6bdc003e90c86b6167079045a46a7cb21b6566b336d847c8161c6322f.exe
Resource
win10v2004-20220812-en
General
-
Target
d61438e6bdc003e90c86b6167079045a46a7cb21b6566b336d847c8161c6322f
-
Size
13KB
-
MD5
68e024220e22beb2e3448c20502cf020
-
SHA1
66304467d1864409584ce3aa19ad461474e8b587
-
SHA256
d61438e6bdc003e90c86b6167079045a46a7cb21b6566b336d847c8161c6322f
-
SHA512
49c491a7b9c8b6209a0ac82ce206011f71d233c74cb192f10c06f8616a92891c07c6fee546a227fbc6e60928517ea58100ac4888b971d68d4ee29f8bb60586e3
-
SSDEEP
384:flgn1I4uPAr6KBWAJYAYOlYWtXITCHJcG:dgni4SyJVYReITCaG
Malware Config
Signatures
Files
-
d61438e6bdc003e90c86b6167079045a46a7cb21b6566b336d847c8161c6322f.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE