Static task
static1
Behavioral task
behavioral1
Sample
f91fa30914bd41d74ffc6b28b7ef040a20e7a0bf648fb1cf2c486b18e773f640.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f91fa30914bd41d74ffc6b28b7ef040a20e7a0bf648fb1cf2c486b18e773f640.exe
Resource
win10v2004-20220812-en
General
-
Target
f91fa30914bd41d74ffc6b28b7ef040a20e7a0bf648fb1cf2c486b18e773f640
-
Size
94KB
-
MD5
21648240be03da34be3ed5d370c8a211
-
SHA1
cc542c3ecadce409bd0742fb84df743dc2385a9a
-
SHA256
f91fa30914bd41d74ffc6b28b7ef040a20e7a0bf648fb1cf2c486b18e773f640
-
SHA512
46029ece265cf77d75d8d89cbbcb7ff383e2fced0357c4a887ed3615f1495d0ea72c7d9caac72575101f2841b8571e362473fc5b528f479eac7dae9ec70f4857
-
SSDEEP
1536:K24L2xW7RDMZW/TvzBk4UaeIP79wy6CkSrvh8feD3hx94pdLEta0odlofXmBKOW3:P47So/TvziMadSbOIpYoXmgmU
Malware Config
Signatures
Files
-
f91fa30914bd41d74ffc6b28b7ef040a20e7a0bf648fb1cf2c486b18e773f640.exe windows x86
1c372311534116eeffdf56f3f6c69c5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetProcAddress
user32
wsprintfA
MessageBoxA
Sections
.text Size: 68KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RxBot Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE