Static task
static1
Behavioral task
behavioral1
Sample
30748deb8d75bd66e8c634f570e19043bd0b09e4ef90639f144990b1f9d982ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30748deb8d75bd66e8c634f570e19043bd0b09e4ef90639f144990b1f9d982ae.exe
Resource
win10v2004-20220812-en
General
-
Target
30748deb8d75bd66e8c634f570e19043bd0b09e4ef90639f144990b1f9d982ae
-
Size
219KB
-
MD5
4c6cec66e65ac74b69ffcc07cf7b8d20
-
SHA1
9cf6a9b5db9b0b31d421da0500a64e6af1c713fb
-
SHA256
30748deb8d75bd66e8c634f570e19043bd0b09e4ef90639f144990b1f9d982ae
-
SHA512
9b58aee00e93e8eb150b70d4169efd93902b66558cd22d7f6d80dc9aecaa313ba2dff8d0a34aa4730ba85d39bd34f8a0b07a892b63730349cee90aa744da3b57
-
SSDEEP
6144:qoeKOcfwjNJ5WwULEsUOXVURTruzn3h6zHn:NekfyFZSlyi3h6zH
Malware Config
Signatures
Files
-
30748deb8d75bd66e8c634f570e19043bd0b09e4ef90639f144990b1f9d982ae.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE