Static task
static1
Behavioral task
behavioral1
Sample
0dcefd49e5075921ce7b250a7d9a0533d460925c1ac070d8ea30c59728827264.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0dcefd49e5075921ce7b250a7d9a0533d460925c1ac070d8ea30c59728827264.exe
Resource
win10v2004-20220901-en
General
-
Target
0dcefd49e5075921ce7b250a7d9a0533d460925c1ac070d8ea30c59728827264
-
Size
80KB
-
MD5
a0fff7202f0eecdacb8df415b8599120
-
SHA1
fd55ddcfe10c46c9f0e44d4db0356e65f4b91cf8
-
SHA256
0dcefd49e5075921ce7b250a7d9a0533d460925c1ac070d8ea30c59728827264
-
SHA512
c0ce58a47803b57dbf2c3b2f799068d874cfbc605aa5de0d22eb31b8390746bbbefa297c572372ded05574f090536243f78c9b49b7ec46dd91c6de3da12978f0
-
SSDEEP
1536:5CxCoeLzlojhcFlWCSJauitYTh5TAj55MSl5YMvsGXNw2jzO8w1WSz6pc:4Xyzloy0C+YQh5EF52QjC8eWSW
Malware Config
Signatures
Files
-
0dcefd49e5075921ce7b250a7d9a0533d460925c1ac070d8ea30c59728827264.exe windows x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.xlok Size: 44KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xlok Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xlok Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xlok Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xlok Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xlok Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE