Static task
static1
Behavioral task
behavioral1
Sample
2fbe9544a26e7ce202ae57a6360c0103a417d3554adf930bd67ef29af0cfa4c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2fbe9544a26e7ce202ae57a6360c0103a417d3554adf930bd67ef29af0cfa4c9.exe
Resource
win10v2004-20220901-en
General
-
Target
2fbe9544a26e7ce202ae57a6360c0103a417d3554adf930bd67ef29af0cfa4c9
-
Size
144KB
-
MD5
21153bd54f45def2c8fdb63bd9be2552
-
SHA1
b9bcb510636074b4cb9be7f501e83e39c00c43cf
-
SHA256
2fbe9544a26e7ce202ae57a6360c0103a417d3554adf930bd67ef29af0cfa4c9
-
SHA512
e695b430417878de1c3c6c1fc9667de5fb999ba0aadd83f7af800bb9170fa70655456880c6dbf6dcf24c6bcfce75c44256388e9dcf77eb3d6203d55d47739e03
-
SSDEEP
3072:7mRDOEnvK1zwLvNHy9iUEmy3fL78arIF+2z1Zl:7my4y1zE/mgH8wcN
Malware Config
Signatures
Files
-
2fbe9544a26e7ce202ae57a6360c0103a417d3554adf930bd67ef29af0cfa4c9.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE