Hai
Static task
static1
Behavioral task
behavioral1
Sample
51a80e250522b9d25513276e978239ecf3de252962acba3c3b7a4158ce7d6720.exe
Resource
win7-20220812-en
General
-
Target
51a80e250522b9d25513276e978239ecf3de252962acba3c3b7a4158ce7d6720
-
Size
177KB
-
MD5
02e24321dd554734e63b9e981a33d298
-
SHA1
38be94c684279ca3cf997837bd1c29ddca2497aa
-
SHA256
51a80e250522b9d25513276e978239ecf3de252962acba3c3b7a4158ce7d6720
-
SHA512
9c5a0f2366724bcd0a85a749256f7c68f52d03530eacaef3dccda7763dfe57d015fd17a0f234b0e7a0383f07d96f099a6328549b34e35b5ad41d2da07f2f6683
-
SSDEEP
3072:x9bIBscr0qJip0UadgA3/JuAzRdEIq2rZCRzDDaPoS+1MUzDDA:xksVqljZkGRnRr6iPo9n
Malware Config
Signatures
Files
-
51a80e250522b9d25513276e978239ecf3de252962acba3c3b7a4158ce7d6720.exe windows x86
8047eaf1f26dcba7b3917a59f19c6398
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvcrt
_exit
Exports
Exports
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qq20130 Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qq20131 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ