Static task
static1
Behavioral task
behavioral1
Sample
b94b73852aa1f00ba01b2e769d8d246e35c1e77f570010b02b470f03991f4c64.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b94b73852aa1f00ba01b2e769d8d246e35c1e77f570010b02b470f03991f4c64.exe
Resource
win10v2004-20220812-en
General
-
Target
b94b73852aa1f00ba01b2e769d8d246e35c1e77f570010b02b470f03991f4c64
-
Size
38KB
-
MD5
570a5a8fa125ebc0a65704b9824b6b0e
-
SHA1
e7d5179e2aec848616e9cc28d977fbbd6ce9edb1
-
SHA256
b94b73852aa1f00ba01b2e769d8d246e35c1e77f570010b02b470f03991f4c64
-
SHA512
0cbbf95e7bf62e0a5b5d885f85af8f933984228fd7604d8395644644770351111d9bfc05941003487ca018fdfe3f3edd29fa101dd7acc8b03d86835d11ff8e54
-
SSDEEP
768:nvaEsRUKSggaMTi/Jz6IheK41gIeAeC0RD6yZbW:var96o4S
Malware Config
Signatures
Files
-
b94b73852aa1f00ba01b2e769d8d246e35c1e77f570010b02b470f03991f4c64.exe windows x86
a950909fb61e8c707383ce84ea445c07
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord326
ord469
ord309
ord305
ord1305
ord830
ord522
ord214
ord1103
ord1352
ord572
ord676
ord610
ord139
ord1329
ord224
ord85
ord1361
ord578
ord1364
ord1349
ord1358
ord363
ord679
ord1355
ord357
ord582
ord872
ord722
ord1324
ord718
ord720
ord721
ord1267
ord500
ord1138
ord614
ord373
ord1304
ord568
ord356
ord1264
ord477
ord475
ord355
ord532
ord1242
ord451
ord1222
ord284
ord393
ord612
ord534
ord1050
user32
ord1618
ord1785
ord1997
ord2100
ord2298
ord2004
ord2039
ord1683
ord1887
ord2013
ord2331
ord2248
ord1672
ord1673
ord2018
ord1800
ord1921
ord2223
ord1806
ord1804
ord2167
ord2168
ord2227
ord1516
ord1729
ord1572
ord1723
ord1797
ord1664
ord2271
ord2080
ord1992
ord1772
ord1782
ord1680
ord1727
ord2212
ord2078
ord1891
ord1984
ord1854
ord2144
ord2277
ord2172
gdi32
ord1555
ord1651
ord1582
ord1578
ord1708
advapi32
ord1638
ord1562
ord1639
ord1623
ord1569
ord1610
ord1585
shell32
ord442
ole32
ord72
ord26
comctl32
ord17
avcdrom
ord51
ord53
ord54
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ