Static task
static1
Behavioral task
behavioral1
Sample
f56203e1d3ef036ecc13b3d3b189c24992a79b981df7f245708608af6f78863b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f56203e1d3ef036ecc13b3d3b189c24992a79b981df7f245708608af6f78863b.exe
Resource
win10v2004-20220812-en
General
-
Target
f56203e1d3ef036ecc13b3d3b189c24992a79b981df7f245708608af6f78863b
-
Size
61KB
-
MD5
0debfd43cae30bb0adc1d699c9686e80
-
SHA1
9bf02a86c6aae1d3647d77e672392b0b39be4c4b
-
SHA256
f56203e1d3ef036ecc13b3d3b189c24992a79b981df7f245708608af6f78863b
-
SHA512
702307561de1e2f5f1d759ad7bd28485e454dd65edf0af9517f886214a51b2f9a2b23fd0591f0d7bbdb8fed7b6379beccc0c9cf390a7729f7567d86c92205fe4
-
SSDEEP
768:/hjJSH1TPfe4dYpIGYY3kqOd1mP8k1HiB9Sfx1tj510Rlt5l:/hjJo1TP5Y3XOd/k/x1F51It5
Malware Config
Signatures
Files
-
f56203e1d3ef036ecc13b3d3b189c24992a79b981df7f245708608af6f78863b.exe windows x86
371911b227edbe7096336cc847f8ecad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileMappingA
lstrlenA
shell32
ShellExecuteA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NewSec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NewSec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KK Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE