Static task
static1
Behavioral task
behavioral1
Sample
4fab9f384183668b098ff0420f3823d30c18004d772478f6ba30faaf80bb1901.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4fab9f384183668b098ff0420f3823d30c18004d772478f6ba30faaf80bb1901.exe
Resource
win10v2004-20220812-en
General
-
Target
4fab9f384183668b098ff0420f3823d30c18004d772478f6ba30faaf80bb1901
-
Size
368KB
-
MD5
a11751ba36fc6006f0abe24360fb07e0
-
SHA1
75488f72f4163ca8acd0fc07acb8da18363a7f33
-
SHA256
4fab9f384183668b098ff0420f3823d30c18004d772478f6ba30faaf80bb1901
-
SHA512
5fe7922690af0fb79d66dc28c7193100d7d0675783b9f7e6937449d0289d47aeddf1c5532a6f02de75b47b80e3403456c04cee43b1d96a05256735e5f7a62e27
-
SSDEEP
1536:RWuBseKs1L0Cub6/w8KptC255f1zwQVgvIKF/:RxanS0Cub60zJ1zwLvI
Malware Config
Signatures
Files
-
4fab9f384183668b098ff0420f3823d30c18004d772478f6ba30faaf80bb1901.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE