Static task
static1
Behavioral task
behavioral1
Sample
2851d3a125ad6946eb56abaafe6b7f9961c0d32eb7c20106a96424999939d351.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2851d3a125ad6946eb56abaafe6b7f9961c0d32eb7c20106a96424999939d351.exe
Resource
win10v2004-20220812-en
General
-
Target
2851d3a125ad6946eb56abaafe6b7f9961c0d32eb7c20106a96424999939d351
-
Size
1.5MB
-
MD5
a03706103691b116518b6f89cfdab051
-
SHA1
bf10ca3cd1cf799766922d5f30b56159cbf292c5
-
SHA256
2851d3a125ad6946eb56abaafe6b7f9961c0d32eb7c20106a96424999939d351
-
SHA512
55a0dd7d8360d537f21a1554da560d92bfa6309c7269d7d950b01f79d0bff5a690818c87e7c48300402eee792bf0a4669eadb10962f3d1cb82ea7e40d07f8ffa
-
SSDEEP
24576:V2BW/jsgECYoBxvkJRm5dWYAbeA7hE/Qiq+35MnkYovuQmizGTig6VTx:QB3ynAb5hV85dN3miztFVF
Malware Config
Signatures
Files
-
2851d3a125ad6946eb56abaafe6b7f9961c0d32eb7c20106a96424999939d351.exe windows x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bliiadyz Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zmonxeye Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE