Static task
static1
Behavioral task
behavioral1
Sample
b01f6b67e527edc8990729467146e785e90d516ea4f4e2f7aa453a98c9fdfd29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b01f6b67e527edc8990729467146e785e90d516ea4f4e2f7aa453a98c9fdfd29.exe
Resource
win10v2004-20220812-en
General
-
Target
b01f6b67e527edc8990729467146e785e90d516ea4f4e2f7aa453a98c9fdfd29
-
Size
155KB
-
MD5
0cb67a2efc5ebb6f764ff87200170e16
-
SHA1
b85d121cf9e91346abd849a084056f3506b0c5a3
-
SHA256
b01f6b67e527edc8990729467146e785e90d516ea4f4e2f7aa453a98c9fdfd29
-
SHA512
26da99356dfc96abb4882fe6f72d078e0786308ecec5b2baac135056ed02f219f7d70aee45e42e91d1eb862369c7d2079a5459862944e1b32425cfaec4676351
-
SSDEEP
3072:DXOSRa+AqXAskHyg+bQwnraBIpPQMPozgEAQIIOUr:Dra+AT4EwnraBCDorABq
Malware Config
Signatures
Files
-
b01f6b67e527edc8990729467146e785e90d516ea4f4e2f7aa453a98c9fdfd29.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 65KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE