Static task
static1
Behavioral task
behavioral1
Sample
b20409deff54da160a053e8aecc9c77c96711d65803390813c50a1437942470f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b20409deff54da160a053e8aecc9c77c96711d65803390813c50a1437942470f.exe
Resource
win10v2004-20220901-en
General
-
Target
b20409deff54da160a053e8aecc9c77c96711d65803390813c50a1437942470f
-
Size
248KB
-
MD5
84f35d540d36ed6ae002f5da0bbabf10
-
SHA1
fbeaade6bc2b346da9dbecbcd624e3402b42d9a5
-
SHA256
b20409deff54da160a053e8aecc9c77c96711d65803390813c50a1437942470f
-
SHA512
21a90ce94ab5d4aea2d40a3428724715720c377f4eea3893dbcfa929e62a11f22e54405f4c9df757202b8e29a33ac66d0798e85783d9a34f317f53b2c492dbaf
-
SSDEEP
6144:Cx+0xvbmMIuog9LcMEHWKfObjfgHVkRpr11HwGoh3REIMwdwq/9zwrS:Y5bmMIzcn8WUOX8VkDHwGoVMiX
Malware Config
Signatures
Files
-
b20409deff54da160a053e8aecc9c77c96711d65803390813c50a1437942470f.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
.text Size: 70KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ADATA Size: 27KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE