Static task
static1
Behavioral task
behavioral1
Sample
c0d7701bb2bbcf59b145233052ae8b78820d6626f035b721e7b8e305cc886e40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0d7701bb2bbcf59b145233052ae8b78820d6626f035b721e7b8e305cc886e40.exe
Resource
win10v2004-20220901-en
General
-
Target
c0d7701bb2bbcf59b145233052ae8b78820d6626f035b721e7b8e305cc886e40
-
Size
115KB
-
MD5
00ddf3cf32a48aa8b62478da2735a49b
-
SHA1
d3ece0ae5143d707f6eb98b19ec4543cae7a41a9
-
SHA256
c0d7701bb2bbcf59b145233052ae8b78820d6626f035b721e7b8e305cc886e40
-
SHA512
0e9952119870201a0505d696188d79e8dab666ca75fd5e5503a468a6b538377eae74fbf79236588517f29a80a7b9ec2a4fcc02ea6d6f96165d30d1dfd7d3ad6a
-
SSDEEP
3072:HKmLDwJKIuWwjA4yVcxdA5G2niO1P9HfgvSVi:qmLDCKIuXjA4yauloP
Malware Config
Signatures
Files
-
c0d7701bb2bbcf59b145233052ae8b78820d6626f035b721e7b8e305cc886e40.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE