Static task
static1
Behavioral task
behavioral1
Sample
989c086c2af9cc64ad2ca7cc6c6735999a28623992f015e86865c347db386fb7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
989c086c2af9cc64ad2ca7cc6c6735999a28623992f015e86865c347db386fb7.exe
Resource
win10v2004-20220812-en
General
-
Target
989c086c2af9cc64ad2ca7cc6c6735999a28623992f015e86865c347db386fb7
-
Size
297KB
-
MD5
9166ec5c97798365dc31dc8134d88a0d
-
SHA1
e71b2a152f4cc79a9ad1960dbed681d4596dcafe
-
SHA256
989c086c2af9cc64ad2ca7cc6c6735999a28623992f015e86865c347db386fb7
-
SHA512
baacddd8b52a73b97682d36e5e03faa7ed1031d43d738c805e4b2ceaac9d03389fb4abd3837d3b68fa3dffd281f2523447212e18ff8772c7fa01c0057351b817
-
SSDEEP
6144:P0GVmlLnDO+CrtpsfFI8EAS/Z43ztQ8Ln70W4LcrntCr:P0GVKiCF3BS/IRQ8L4fr
Malware Config
Signatures
Files
-
989c086c2af9cc64ad2ca7cc6c6735999a28623992f015e86865c347db386fb7.exe windows x86
55b099990cbb00fed41881dd2fcc9b1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAllocEx
Sections
CODE Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ