Static task
static1
Behavioral task
behavioral1
Sample
d6afa01496d9b95216b1a66f93299f556a2ed85804eca991163cb7cc2cb13a89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6afa01496d9b95216b1a66f93299f556a2ed85804eca991163cb7cc2cb13a89.exe
Resource
win10v2004-20220901-en
General
-
Target
d6afa01496d9b95216b1a66f93299f556a2ed85804eca991163cb7cc2cb13a89
-
Size
71KB
-
MD5
0c5668ff073ee3f92f2c7a7b1f549400
-
SHA1
c59818871a90bf4af202995bd45e1905e62a725a
-
SHA256
d6afa01496d9b95216b1a66f93299f556a2ed85804eca991163cb7cc2cb13a89
-
SHA512
8de8f14cc619ace9582f8c37525ba83cf58f081fe8fa2a1c5170e9f081274300ef49626ce106f297c31b04eb2cb5a812c9cb6a7451c7287db6893762105e77a0
-
SSDEEP
1536:KGyK7vFSgnn10QjVBLi5uUquDpxZf1zwQVgvUwU:KGjvFdbVo5uqpxp1zwLvUp
Malware Config
Signatures
Files
-
d6afa01496d9b95216b1a66f93299f556a2ed85804eca991163cb7cc2cb13a89.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE