Static task
static1
Behavioral task
behavioral1
Sample
73f8a6e36294308ad2ca608901e76699b24f8cbbe9936abeaf00f11b0a02760b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73f8a6e36294308ad2ca608901e76699b24f8cbbe9936abeaf00f11b0a02760b.exe
Resource
win10v2004-20220812-en
General
-
Target
73f8a6e36294308ad2ca608901e76699b24f8cbbe9936abeaf00f11b0a02760b
-
Size
632KB
-
MD5
93bc0534f0c5bceb28e911dd9335beda
-
SHA1
0dc0af0aa8e597de9ff5dcfdaecc821f91f3760c
-
SHA256
73f8a6e36294308ad2ca608901e76699b24f8cbbe9936abeaf00f11b0a02760b
-
SHA512
0907e7ad34ff1dbeb25328b975a0e206c841a10d5135d0a172c33d83bf8c3d2ce75411e7280ef54156e39d7e9e2190fa102f9d0b15aa5ba10123cc41b0b3ab96
-
SSDEEP
3072:aSsvihLlTQz9z71iURo2SJJmY6uFNcgifDbmeTXwVdBR:rsqhJMxzJiU5SeLmNSbmebW1
Malware Config
Signatures
Files
-
73f8a6e36294308ad2ca608901e76699b24f8cbbe9936abeaf00f11b0a02760b.exe windows x64
9f60ca72d75c1cfd8d9fd379579518de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernelbase
GetModuleHandleW
GetProcAddress
LoadLibraryExA
VirtualProtect
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE