?XMLPARSE@@YAKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
dfd552b1266e2fd6ec8337eb37caef9c6be74b0ddbb465d9bd611eac5555c066.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfd552b1266e2fd6ec8337eb37caef9c6be74b0ddbb465d9bd611eac5555c066.exe
Resource
win10v2004-20221111-en
General
-
Target
dfd552b1266e2fd6ec8337eb37caef9c6be74b0ddbb465d9bd611eac5555c066
-
Size
80KB
-
MD5
1eeac80fcee87aee5fc5bc8d4b0e6d30
-
SHA1
05dde9eaccac4f1ccd3cf9a40006f8f2c6db51d9
-
SHA256
dfd552b1266e2fd6ec8337eb37caef9c6be74b0ddbb465d9bd611eac5555c066
-
SHA512
0be064c117c2775aef36df08e0cb26ab6c7b0bc4cca98c7100f0992def140b7d73a48914c6044ad43a3c3e30323761e721fca8e099f569c6b62e4627846eced7
-
SSDEEP
768:nDwczmp7x1E925OrmaNctd1zSLOqMd6CKveSLcm+BbA4sFr8t+ugu:nDwumJx1EUydLOqMdcvGm+J
Malware Config
Signatures
Files
-
dfd552b1266e2fd6ec8337eb37caef9c6be74b0ddbb465d9bd611eac5555c066.exe windows x86
16b9c11a5e552e6f68b7fbe7de1bf739
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetLastError
DeleteFileW
GetModuleHandleA
VirtualFree
GetProcAddress
GetTickCount
VirtualAlloc
CloseHandle
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
ws2_32
select
Exports
Exports
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.const Size: 4KB - Virtual size: 965B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ