Static task
static1
Behavioral task
behavioral1
Sample
b8188602d38e7e671f33374ca328adc88a02527e124af646e15d6d75fbaa09aa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b8188602d38e7e671f33374ca328adc88a02527e124af646e15d6d75fbaa09aa.exe
Resource
win10v2004-20220812-en
General
-
Target
b8188602d38e7e671f33374ca328adc88a02527e124af646e15d6d75fbaa09aa
-
Size
25KB
-
MD5
91a54de806dda36fccae30e65f749480
-
SHA1
06cb5da245e2d5ef29bd9906bf893263fc1eafbf
-
SHA256
b8188602d38e7e671f33374ca328adc88a02527e124af646e15d6d75fbaa09aa
-
SHA512
7feaccd4539eab4b3ee4ca6d510ee6845955cd45f26a3e3471edc8780329fa48eb117e3f185f5a5bd97f8d9582402d1ec3a2f972bbed68de5d145b2c9044108a
-
SSDEEP
768:ZksvAn/9W1RirH24TaaLnPSrbs8V2G673RVzdida4m4QZ9iFFDZzQnSuPXKOOwq1:ZksvAn/9W1RirH2K9Lqrbs8V2G67hVzG
Malware Config
Signatures
Files
-
b8188602d38e7e671f33374ca328adc88a02527e124af646e15d6d75fbaa09aa.exe windows x86
b1ddc376d12180971747dc56b53e2312
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
VirtualAlloc
GetLastError
activeds
DllGetClassObject
FreeADsMem
ADsEncodeBinaryData
msvcrt
_except_handler3
cmdial32
AutoDialFunc
advapi32
CryptGenKey
Sections
.text Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE