Static task
static1
Behavioral task
behavioral1
Sample
b98d201682aa336ec29429733703e17bcff570e84dbd618982529852e260e7d6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b98d201682aa336ec29429733703e17bcff570e84dbd618982529852e260e7d6.exe
Resource
win10v2004-20221111-en
General
-
Target
b98d201682aa336ec29429733703e17bcff570e84dbd618982529852e260e7d6
-
Size
2.5MB
-
MD5
447a1d48c97310e817356f98d3afe8f5
-
SHA1
51ea7620d61347c48653660f7423e8bd11b450a0
-
SHA256
b98d201682aa336ec29429733703e17bcff570e84dbd618982529852e260e7d6
-
SHA512
0c8e55e3ce68f8ffafb8d24711be6674438b4ebb54c6f748f36245f645d65aeafa4698f06a4fbce3dfc6136f5e12694551c4aca07f1c743b319df10bc7c062e1
-
SSDEEP
49152:a/juOAkTNDBPCmJhHw5sEG9r44+XVZC2C5sWp2e1WaTMe01Y/7Lo+Ew08eWlrwI+:a/j3AkTrOsEAs4crCR5l8Wh01Y/7JE5P
Malware Config
Signatures
Files
-
b98d201682aa336ec29429733703e17bcff570e84dbd618982529852e260e7d6.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LordFox Size: - Virtual size: 664KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FoxLord Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Soft2CN Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE