Static task
static1
Behavioral task
behavioral1
Sample
de7ef3b1122883a5ad367a95dc78881019f45035dcee63a9b9c6c03f82a5b74d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
de7ef3b1122883a5ad367a95dc78881019f45035dcee63a9b9c6c03f82a5b74d.exe
Resource
win10v2004-20220812-en
General
-
Target
de7ef3b1122883a5ad367a95dc78881019f45035dcee63a9b9c6c03f82a5b74d
-
Size
479KB
-
MD5
555257dba9c2e6223c35021e47eb8be0
-
SHA1
2b3dce9491e894dcbe297a0a2817c052b53b7e43
-
SHA256
de7ef3b1122883a5ad367a95dc78881019f45035dcee63a9b9c6c03f82a5b74d
-
SHA512
a8f280349af8ad3459ddc2d98a140c8d91d31045e469b6a78ff8563185de421525568c9cdf41c37df64968715363de0b0a90deb0d6a8e185581491610d1d2d3f
-
SSDEEP
12288:ajlPE9XhCdZq98nq1cf27zbTlYqKRTbi4MahNGGUx+:s1ZqSufbTlYTRXi4MahNGn+
Malware Config
Signatures
Files
-
de7ef3b1122883a5ad367a95dc78881019f45035dcee63a9b9c6c03f82a5b74d.exe windows x86
bd7dc714b86ceca4fa79dca1af7a4c87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarR8FromI2
ntdll
NtIsProcessInJob
kernel32
GetCommandLineW
GetThreadLocale
user32
GetCapture
Sections
.text Size: 472KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 197B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE