Static task
static1
Behavioral task
behavioral1
Sample
b489707396e465ed0a5954c395f5441ec216f201ccc9248ec5bbeea9bcc9f565.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b489707396e465ed0a5954c395f5441ec216f201ccc9248ec5bbeea9bcc9f565.exe
Resource
win10v2004-20220812-en
General
-
Target
b489707396e465ed0a5954c395f5441ec216f201ccc9248ec5bbeea9bcc9f565
-
Size
344KB
-
MD5
0b88dc578bad085419e11534089b6ea7
-
SHA1
c2e698b1203336688fe5a3015adb568593944696
-
SHA256
b489707396e465ed0a5954c395f5441ec216f201ccc9248ec5bbeea9bcc9f565
-
SHA512
b1e25ab94d8a1a59a134e864762909e4cbcf0e84753a7f82018017513cb461ea5cc6e6a587f5775903fe8479cf57c30f05661be86acdcd764f344358e149b9c0
-
SSDEEP
6144:iKK1HJqwc8AtjoOuRYEd10yAyb6R+2zP2LZaYZ:i5ywcjBPv+ABR+22ag
Malware Config
Signatures
Files
-
b489707396e465ed0a5954c395f5441ec216f201ccc9248ec5bbeea9bcc9f565.exe windows x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE