Static task
static1
Behavioral task
behavioral1
Sample
b7e9868af8dbdec8993ffabe99b0b9ed9f398376fb9284edab43062d9525fc11.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7e9868af8dbdec8993ffabe99b0b9ed9f398376fb9284edab43062d9525fc11.exe
Resource
win10v2004-20220812-en
General
-
Target
b7e9868af8dbdec8993ffabe99b0b9ed9f398376fb9284edab43062d9525fc11
-
Size
31KB
-
MD5
8132bd434f7f86fe8995be829647a078
-
SHA1
529504f58064804d2449a83fa93a6b7f622d50cc
-
SHA256
b7e9868af8dbdec8993ffabe99b0b9ed9f398376fb9284edab43062d9525fc11
-
SHA512
d5bd723928685ab806f28c8d332803fea466c550daf0a57c629d987494898b3479e934077f6c22f6c53d96b90cc3fc36347e24b516f96d4f4f954ec5ddb8ba8a
-
SSDEEP
768:raDgz6L283cccKhNigdmfpKR9wr86fHEurWpXi0e:ra0a283c6TiLhC9Y86fHEuaxne
Malware Config
Signatures
Files
-
b7e9868af8dbdec8993ffabe99b0b9ed9f398376fb9284edab43062d9525fc11.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 27KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE