Static task
static1
Behavioral task
behavioral1
Sample
5604c6a3ee223981c3b1dd5d02d0c768973cf2f9273fbdc84377ee8b7fa2a6fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5604c6a3ee223981c3b1dd5d02d0c768973cf2f9273fbdc84377ee8b7fa2a6fa.exe
Resource
win10v2004-20220812-en
General
-
Target
5604c6a3ee223981c3b1dd5d02d0c768973cf2f9273fbdc84377ee8b7fa2a6fa
-
Size
42KB
-
MD5
0db4460e7b6ad9fdc146804aff01a9db
-
SHA1
cd72671755988e6c584f0ecee99e4c04b96ebfeb
-
SHA256
5604c6a3ee223981c3b1dd5d02d0c768973cf2f9273fbdc84377ee8b7fa2a6fa
-
SHA512
844330010b760606ad961fe11d05986808322e37d169a6c1065285c8054a44751de1f435a6ce6174fe681ed4e266432a01c45c9873dcef42abfcf080e8478364
-
SSDEEP
768:iTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/5GDQoPi9M:iLIcNTcWATPuhI9hGTKC
Malware Config
Signatures
Files
-
5604c6a3ee223981c3b1dd5d02d0c768973cf2f9273fbdc84377ee8b7fa2a6fa.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 30KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE