Static task
static1
Behavioral task
behavioral1
Sample
d836021a9937a9949d6a93437d26697ec0ab98da422af156ef1f4e76f7a8f390.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d836021a9937a9949d6a93437d26697ec0ab98da422af156ef1f4e76f7a8f390.exe
Resource
win10v2004-20220812-en
General
-
Target
d836021a9937a9949d6a93437d26697ec0ab98da422af156ef1f4e76f7a8f390
-
Size
106KB
-
MD5
76757e1a82f43bc03c3ed2c728365318
-
SHA1
92a71105d99d0031908ba4f2c38ef99c117e7e9b
-
SHA256
d836021a9937a9949d6a93437d26697ec0ab98da422af156ef1f4e76f7a8f390
-
SHA512
b1132307cf841dad83d58f2ea621c20bd711ee42f74153fc09d61c4eb875b73bbf4b7205e140a05885f9fb03f0d2fadf81c399b27a2187408347249f23723f91
-
SSDEEP
3072:D9ukgXS22mULERRbYaQQCAU/wyU/GfodY1itJ9:DJ+dpXbYHQLU/wyU/GfR1itJ
Malware Config
Signatures
Files
-
d836021a9937a9949d6a93437d26697ec0ab98da422af156ef1f4e76f7a8f390.exe windows x86
939fcdf624be3dd897fe1f7cee934066
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
Sleep
VirtualAlloc
SetCurrentDirectoryA
VirtualFree
ExitProcess
user32
GetMessagePos
Sections
.text Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 261B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dsfwer Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ