Static task
static1
Behavioral task
behavioral1
Sample
b85a468b125bf5cc63e25b37639a3dcd799e0705d970f62fdbd4ead273c4c659.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b85a468b125bf5cc63e25b37639a3dcd799e0705d970f62fdbd4ead273c4c659.exe
Resource
win10v2004-20221111-en
General
-
Target
b85a468b125bf5cc63e25b37639a3dcd799e0705d970f62fdbd4ead273c4c659
-
Size
240KB
-
MD5
30e3c51ed2508b72d9f8087fd003fb90
-
SHA1
4d8fa333f6d71cb1e5ddaee89b9529dc31ed29a6
-
SHA256
b85a468b125bf5cc63e25b37639a3dcd799e0705d970f62fdbd4ead273c4c659
-
SHA512
763c760993e7847bd7e6be4914503b6ea5ef0ef7eb56e81b3b1271aebef1872e7888ad5b919482265ed84429cc5d961c994092d586efb2e14023475eddff16b3
-
SSDEEP
6144:kh3y8ZEo2foIZC1OIky4D9FujJabUFFShv+C+e+GNLBRBAn:O3xZEo2fbZ/F7DMrFFev7+0N1R6n
Malware Config
Signatures
Files
-
b85a468b125bf5cc63e25b37639a3dcd799e0705d970f62fdbd4ead273c4c659.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 142KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE