Static task
static1
Behavioral task
behavioral1
Sample
2879f2674403aa13e474768082850066679f9471cc0880515dea33c8bba63ba2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2879f2674403aa13e474768082850066679f9471cc0880515dea33c8bba63ba2.exe
Resource
win10v2004-20221111-en
General
-
Target
2879f2674403aa13e474768082850066679f9471cc0880515dea33c8bba63ba2
-
Size
218KB
-
MD5
31547f201e68004eb33a02bad35a00a2
-
SHA1
4fe1c79ae26a947e2a4da062ed7f7ed436767e65
-
SHA256
2879f2674403aa13e474768082850066679f9471cc0880515dea33c8bba63ba2
-
SHA512
c1211f0a9f5146305ef9e074ca1f5c253936488c0f612b2e179117d6af2e99e31eba3b4fef870f3827f520575aa887729361e876363b5a7034b76c5149d57a79
-
SSDEEP
6144:dn6q2Ys1x+wxFjmf1fTc1u6QoCzbOn6AiSpuW:F6qs1xoo1uDvviB1puW
Malware Config
Signatures
Files
-
2879f2674403aa13e474768082850066679f9471cc0880515dea33c8bba63ba2.exe windows x86
d9035f7f7b589f6a5b3fa10c446cb5de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
LocalAlloc
CreateFileMappingW
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 166KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ