Static task
static1
Behavioral task
behavioral1
Sample
f30b823ffeccfb46a689162e9ede279dc798fd94a4b4dd5503135c6fcdc216df.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f30b823ffeccfb46a689162e9ede279dc798fd94a4b4dd5503135c6fcdc216df.exe
Resource
win10v2004-20220901-en
General
-
Target
f30b823ffeccfb46a689162e9ede279dc798fd94a4b4dd5503135c6fcdc216df
-
Size
246KB
-
MD5
54a1e25b0a5bfeedc293e0cc1272cb10
-
SHA1
61f1e57489eabe3a124f2ef2da85770a68ac67a8
-
SHA256
f30b823ffeccfb46a689162e9ede279dc798fd94a4b4dd5503135c6fcdc216df
-
SHA512
7b9e6d6208a7916fbf729842138985c084918a57533ee02bb949c19ebd3fe9ad950e3c31ac9de5c995c1bd4c9a138991446d938bb855741efa2f2c69535e487b
-
SSDEEP
6144:Inx+0xvbmMIuog9LcMEHJKjObjfgHVkRpr11HwGoh3REIMwdwq/kzwt:q5bmMIzcn8JWOX8VkDHwGoVMiN
Malware Config
Signatures
Files
-
f30b823ffeccfb46a689162e9ede279dc798fd94a4b4dd5503135c6fcdc216df.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.ADATA Size: - Virtual size: 652KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 245KB - Virtual size: 248KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE