Static task
static1
Behavioral task
behavioral1
Sample
f8ad16fee717256461ed7b253c28d23bd868613384f05bd6e390989f4fec1c19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f8ad16fee717256461ed7b253c28d23bd868613384f05bd6e390989f4fec1c19.exe
Resource
win10v2004-20220901-en
General
-
Target
f8ad16fee717256461ed7b253c28d23bd868613384f05bd6e390989f4fec1c19
-
Size
316KB
-
MD5
441b91aa47fdc811f18913411dff65c8
-
SHA1
869fec8ff16ac452bfc47469f96815aa0a128d12
-
SHA256
f8ad16fee717256461ed7b253c28d23bd868613384f05bd6e390989f4fec1c19
-
SHA512
4521ceff86efd718a5de45ea9bf348ef86b57ed2465ac51162efca9c73de079520e0fc88de75449b1ee2f9a8a3af8949b336092f898155c315b82634c15a0bfd
-
SSDEEP
6144:/rDkaOiw5y0KF31Wh0u5iFLuVOSG9WqcPqN5:/nkIw58+mgiFHZJN5
Malware Config
Signatures
Files
-
f8ad16fee717256461ed7b253c28d23bd868613384f05bd6e390989f4fec1c19.exe windows x86
d9035f7f7b589f6a5b3fa10c446cb5de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
LocalAlloc
CreateFileMappingW
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ