Static task
static1
Behavioral task
behavioral1
Sample
416ba4966c0a293662933dd0f91faa24ee40e224e378ce631258d40489354c9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
416ba4966c0a293662933dd0f91faa24ee40e224e378ce631258d40489354c9b.exe
Resource
win10v2004-20220901-en
General
-
Target
416ba4966c0a293662933dd0f91faa24ee40e224e378ce631258d40489354c9b
-
Size
107KB
-
MD5
d2359e763fb9088556a5f29b78b36d08
-
SHA1
7211f08ab9cc22d89f764d582ca59fc705a4e1fd
-
SHA256
416ba4966c0a293662933dd0f91faa24ee40e224e378ce631258d40489354c9b
-
SHA512
62f69d9e3f985bd66f3e560429a09a83233b2d70e487ebc2d161a27e1867878b46e2acb21ab2b8d3db19061da5b2ba44c5bee293ff40beda700c9d781ee2cc46
-
SSDEEP
3072:IAmESB0Qqj3HBTK/mEAHY9CFTfMdHUQK:IAmESB0Qqj3hW/mtTfMqQ
Malware Config
Signatures
Files
-
416ba4966c0a293662933dd0f91faa24ee40e224e378ce631258d40489354c9b.exe windows x86
1142d5a1d8115637d2f5a39c8141177b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadIdealProcessor
advapi32
AddAccessAllowedAceEx
shell32
FindExecutableA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 434B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ