Static task
static1
Behavioral task
behavioral1
Sample
d79f12fa46ae84f648cd492b46a38138d0d432d6002781595061707b9c09b018.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d79f12fa46ae84f648cd492b46a38138d0d432d6002781595061707b9c09b018.exe
Resource
win10v2004-20220901-en
General
-
Target
d79f12fa46ae84f648cd492b46a38138d0d432d6002781595061707b9c09b018
-
Size
824KB
-
MD5
93559b1f73f9d9aecca596e4eb034e70
-
SHA1
2b1e659c547f23223e31a4ce96023276405dcc8a
-
SHA256
d79f12fa46ae84f648cd492b46a38138d0d432d6002781595061707b9c09b018
-
SHA512
a1fca5eecbab0a6e2939a60fe045457c78478b21c6f2b2ce82eb816a8f1f4f495fd384527ee15a978cbd471783747664e007c88cb89d7ccfaee434531adbe64e
-
SSDEEP
24576:QZJ+3Rbxv7mctSdkeXofT/+brY2Qwz+Rq7ISop:Go5xv7mcseeXr0IsS2
Malware Config
Signatures
Files
-
d79f12fa46ae84f648cd492b46a38138d0d432d6002781595061707b9c09b018.exe windows x86
74f6a680a04772ff7eb573cdf20f8415
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
Sections
Size: 62KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 231KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 664KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
laxdazes Size: 545KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bgzqofjh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE