Static task
static1
Behavioral task
behavioral1
Sample
da608c17bd196f036c44ebab7d9feb4e05ec5edfc2482c25b7181eb824bb17c7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
da608c17bd196f036c44ebab7d9feb4e05ec5edfc2482c25b7181eb824bb17c7.exe
Resource
win10v2004-20220901-en
General
-
Target
da608c17bd196f036c44ebab7d9feb4e05ec5edfc2482c25b7181eb824bb17c7
-
Size
1.2MB
-
MD5
a7d6f79bdc59fec7ba466b41c49cea47
-
SHA1
8f3d17748c6c3f9cbfe2c687e26752b93e5caae2
-
SHA256
da608c17bd196f036c44ebab7d9feb4e05ec5edfc2482c25b7181eb824bb17c7
-
SHA512
d36b0874ed090ccffc12f084d7773a279bdd5731c3c19824a046ffb3e6a173d34e75bee4baae48d5d094e4781f9d613104783042b89aa7290e04837ea74387a8
-
SSDEEP
24576:xZW4UAATqO3OkfmSY2FOqlOwojsFsPJI9HQsUVg3B8A0ZmHHPYfLUnrsXy+O:xZWFArIm5s79ojsFN9HqW3aA7ADmy
Malware Config
Signatures
Files
-
da608c17bd196f036c44ebab7d9feb4e05ec5edfc2482c25b7181eb824bb17c7.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 42KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xpembfxr Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
toxowsgd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE