Static task
static1
Behavioral task
behavioral1
Sample
1f634eb1bcac6c81a36ceeb7082fd5e9e39f152e6cc45e3bc7e8bb5c588256c2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f634eb1bcac6c81a36ceeb7082fd5e9e39f152e6cc45e3bc7e8bb5c588256c2.exe
Resource
win10v2004-20220812-en
General
-
Target
1f634eb1bcac6c81a36ceeb7082fd5e9e39f152e6cc45e3bc7e8bb5c588256c2
-
Size
545KB
-
MD5
05b922b62d91cec9da6dcabda8cff2af
-
SHA1
28c22f580a59f2de4b059aeef9bcdae6ac43d6e4
-
SHA256
1f634eb1bcac6c81a36ceeb7082fd5e9e39f152e6cc45e3bc7e8bb5c588256c2
-
SHA512
a58c27db1d850fb711aa4bd99efce2463a67b12350325c1443fbb7204715ed91d619e466787cd1388568e4921fafa1dcea9d2691683b262f17fe90ab8d89d317
-
SSDEEP
12288:2Al4uO8DKNbgw4GnaJtejFHLvcz7/wHD:2TL86Mw7amuuD
Malware Config
Signatures
Files
-
1f634eb1bcac6c81a36ceeb7082fd5e9e39f152e6cc45e3bc7e8bb5c588256c2.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 229KB - Virtual size: 656KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE