Static task
static1
Behavioral task
behavioral1
Sample
619f7cd04b82d573ad09512587f28d81a1b50afa53290c01a2bc06dc6b786eee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
619f7cd04b82d573ad09512587f28d81a1b50afa53290c01a2bc06dc6b786eee.exe
Resource
win10v2004-20220901-en
General
-
Target
619f7cd04b82d573ad09512587f28d81a1b50afa53290c01a2bc06dc6b786eee
-
Size
73KB
-
MD5
a1128e72309588f155d420a3b8a30796
-
SHA1
44a6e1b1fc91ebb36bcc5701d66d65e7c1683bf3
-
SHA256
619f7cd04b82d573ad09512587f28d81a1b50afa53290c01a2bc06dc6b786eee
-
SHA512
8faed513187615bf4c7090fc03c7329ddbf583cd0d595c7be03dfbbe6e10aa721159819f5f66bc5d376bfa16317ed81a72d4217c896330277ffd3fa09f06d1b2
-
SSDEEP
1536:GKTzixtMhFNG3S2zqv7z+kE+r9Lt/Ayvyqag1XxeDRQyrwHc/v6CdzH:nTxTNG3EukE+r/Lv3Rtxe88/vlb
Malware Config
Signatures
Files
-
619f7cd04b82d573ad09512587f28d81a1b50afa53290c01a2bc06dc6b786eee.exe windows x86
fce7809a30096dee5d325be7178490ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory
Sections
Q8SSt+:H Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k"KE^bpA Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
hWj#=@-t Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EyD;F5.1 Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
`+YCv(hQ Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
K`Sca@&S Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l!.Q?%6l Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:4XPRd&7 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE