Static task
static1
Behavioral task
behavioral1
Sample
bf649fd40f27ca4abba1f5fe65c7f053a1957cbb0ba88380617e114edf89716d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
bf649fd40f27ca4abba1f5fe65c7f053a1957cbb0ba88380617e114edf89716d.exe
Resource
win10v2004-20220812-en
General
-
Target
bf649fd40f27ca4abba1f5fe65c7f053a1957cbb0ba88380617e114edf89716d
-
Size
81KB
-
MD5
0a4c8df153b052f51ef6c75e0f1949a9
-
SHA1
8605f58e9d17d71cd80792664b6bcebee7d29fae
-
SHA256
bf649fd40f27ca4abba1f5fe65c7f053a1957cbb0ba88380617e114edf89716d
-
SHA512
d671c2e723066105e3aeb73a929778b9192d1811d9c6e887fca02be43ba58e90b36b77067799a4754518b7015d9ce27432d02df7632446c7b707c73137c03a2a
-
SSDEEP
1536:M3bhQIIYD1TCZeCkndZJTg95rGeIXzR32xS7/kjRj4c04Xrh4R6qJTR2yQ1W9S1:M3b/IM2eCknzJUZu8S7sV0c0ISTveEw
Malware Config
Signatures
Files
-
bf649fd40f27ca4abba1f5fe65c7f053a1957cbb0ba88380617e114edf89716d.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 51KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE