Static task
static1
Behavioral task
behavioral1
Sample
28eb9b2871065e592e5dbe008df1f231d7ff4105c50bfd45995774f209ba682d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28eb9b2871065e592e5dbe008df1f231d7ff4105c50bfd45995774f209ba682d.exe
Resource
win10v2004-20220812-en
General
-
Target
28eb9b2871065e592e5dbe008df1f231d7ff4105c50bfd45995774f209ba682d
-
Size
216KB
-
MD5
a11df193aff024192ed239c92315de80
-
SHA1
5ec9fa3d6b6bd07fcc38e8f26e8f4110fcd7cc10
-
SHA256
28eb9b2871065e592e5dbe008df1f231d7ff4105c50bfd45995774f209ba682d
-
SHA512
a3af0c465537a5201ab031d3d3b47e9507befb6fc6a4f541b8aee2fbd720bbb73764d61731fe44325f0a3c8105d4f3f2a0ecbf9431ffeea4846c2b22a70b0a96
-
SSDEEP
6144:EDsoAhIXCA9P0ngPLW/vLMhT9M7mA7RusZXR9opNC+j:E8CPSAy3wj+lR9Ahj
Malware Config
Signatures
Files
-
28eb9b2871065e592e5dbe008df1f231d7ff4105c50bfd45995774f209ba682d.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 186KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE