Static task
static1
Behavioral task
behavioral1
Sample
890874d87d2807d46f230ceb28d7d54be963934470d31d4fcc8b5242dd195010.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
890874d87d2807d46f230ceb28d7d54be963934470d31d4fcc8b5242dd195010.exe
Resource
win10v2004-20221111-en
General
-
Target
890874d87d2807d46f230ceb28d7d54be963934470d31d4fcc8b5242dd195010
-
Size
1.4MB
-
MD5
766791c291b7e8f5dc0ba621ff8bff43
-
SHA1
b17cdb2e960e355b6ee4a884ca5ed72fe42815ce
-
SHA256
890874d87d2807d46f230ceb28d7d54be963934470d31d4fcc8b5242dd195010
-
SHA512
124cdacfc2394f78c53e29b4ac6f99ce7f670037daaad526884dfd16bd962ef83c0b656cf60cdba14507869ef384d296ff89393f577e7659cec1c72a86fb37f1
-
SSDEEP
3072:aSsvihLlTQz9z71iURo2SJJmY6uFNcgifDbmeTXwVdBR:rsqhJMxzJiU5SeLmNSbmebW1
Malware Config
Signatures
Files
-
890874d87d2807d46f230ceb28d7d54be963934470d31d4fcc8b5242dd195010.exe windows x64
9f60ca72d75c1cfd8d9fd379579518de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernelbase
GetModuleHandleW
GetProcAddress
LoadLibraryExA
VirtualProtect
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE