Static task
static1
Behavioral task
behavioral1
Sample
c41b999771e5520c02dda8c4a8f93e959268e464b8401eb27a9bf3c3c4e3bd16.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c41b999771e5520c02dda8c4a8f93e959268e464b8401eb27a9bf3c3c4e3bd16.exe
Resource
win10v2004-20220901-en
General
-
Target
c41b999771e5520c02dda8c4a8f93e959268e464b8401eb27a9bf3c3c4e3bd16
-
Size
1.3MB
-
MD5
640a457de71b1c7b27103371728d2877
-
SHA1
3047a1f852a77394ad098d1f923f78e33159388f
-
SHA256
c41b999771e5520c02dda8c4a8f93e959268e464b8401eb27a9bf3c3c4e3bd16
-
SHA512
d33ec0ead82bd895567ec00eca5881c5b3705b78d5d53e04870adc6ec91bce4c49dacde847e8679f46c4821bedce48b037dcd3480b6dfe16e704301741dc4379
-
SSDEEP
24576:2GkveWENzeMhReJj/cOzo/pDuSR5wsXwzMPJz/51oR3:woNeQ+/tzouSR5/hP5LW
Malware Config
Signatures
Files
-
c41b999771e5520c02dda8c4a8f93e959268e464b8401eb27a9bf3c3c4e3bd16.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
LordFox Size: - Virtual size: 640KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FoxLord Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Soft2CN Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yvs Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE