Static task
static1
Behavioral task
behavioral1
Sample
42481eac79b0e6d391fa24f9a94e2f8904efd6e3de2b185d0d3d05d4598a7a7b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
42481eac79b0e6d391fa24f9a94e2f8904efd6e3de2b185d0d3d05d4598a7a7b.exe
Resource
win10v2004-20220812-en
General
-
Target
42481eac79b0e6d391fa24f9a94e2f8904efd6e3de2b185d0d3d05d4598a7a7b
-
Size
307KB
-
MD5
0511f6e6731dcac934be5e097b369691
-
SHA1
8adca745fbca7b88d5ec8d43e4567b466597b0a3
-
SHA256
42481eac79b0e6d391fa24f9a94e2f8904efd6e3de2b185d0d3d05d4598a7a7b
-
SHA512
d259bbd5e28bddfccc0d6b9955c3469e9aab4475d4f836c1b173af7fb5cf1d90c733c496cec45a5400dedd9cd0c2c74f5f30fc81bdc56006aa4e9b9118461031
-
SSDEEP
6144:oeoUTllLuYbBgQ3WlS8rNuBENsoVCVw/7GVR3kJfZo:NPZRu7lS8rkeCnVRuZo
Malware Config
Signatures
Files
-
42481eac79b0e6d391fa24f9a94e2f8904efd6e3de2b185d0d3d05d4598a7a7b.exe windows x86
d9035f7f7b589f6a5b3fa10c446cb5de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
LocalAlloc
CreateFileMappingW
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ