Static task
static1
Behavioral task
behavioral1
Sample
29ab611d4de54fe1576cfa6f6993c584987c04106aa4c707473098a3f300dc83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29ab611d4de54fe1576cfa6f6993c584987c04106aa4c707473098a3f300dc83.exe
Resource
win10v2004-20220812-en
General
-
Target
29ab611d4de54fe1576cfa6f6993c584987c04106aa4c707473098a3f300dc83
-
Size
34KB
-
MD5
a2d4093830419ba2f1dd62a51f031880
-
SHA1
c36bfce6e54a98fe7610f363e851a73884bc0265
-
SHA256
29ab611d4de54fe1576cfa6f6993c584987c04106aa4c707473098a3f300dc83
-
SHA512
919527559dbb88d4198c26e7699480886cba158714876f210c0597b1fcddd38825b70409c52c92bfb2878304caf18b93a14a73e94bd6635f707e519ae6a989d5
-
SSDEEP
768:xGIe1BqvCFJKeUIkPewlhXQmgHP2V+axQkSTj05CqyA0v:dQBpFI9IkmGhSQKkMj0xyZ
Malware Config
Signatures
Files
-
29ab611d4de54fe1576cfa6f6993c584987c04106aa4c707473098a3f300dc83.exe windows x86
a58b1294c1dbfa85dafc3ad128912d79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCurrentProcessId
psapi
EnumProcesses
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ