Static task
static1
Behavioral task
behavioral1
Sample
314b5026a2a50f9aa0ad7fdde1789edb76534cb65d247f738a78db9d580cd3f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
314b5026a2a50f9aa0ad7fdde1789edb76534cb65d247f738a78db9d580cd3f3.exe
Resource
win10v2004-20220812-en
General
-
Target
314b5026a2a50f9aa0ad7fdde1789edb76534cb65d247f738a78db9d580cd3f3
-
Size
154KB
-
MD5
2f6d68c7097a21a98df079dc61a403ec
-
SHA1
bd16144df046c7f8a0d4bf8744fb4568f1be7267
-
SHA256
314b5026a2a50f9aa0ad7fdde1789edb76534cb65d247f738a78db9d580cd3f3
-
SHA512
7ff0056a19616bf088ebd491d9f2d85ef6d23695054d75bd783c098f6f8b04a0cbc9181c7fab14f8069669521fc63441282340a12a2dee877d2ea2a8b7ec2fb7
-
SSDEEP
3072:rJYz+Ffwn7Mkvr4bpPclqmgg+cTITK2sp9SsRf2aMHO7pQ0k8VWl0tqr9:rJYzofictclqmgg+XK2sp9BR+s7plk8g
Malware Config
Signatures
Files
-
314b5026a2a50f9aa0ad7fdde1789edb76534cb65d247f738a78db9d580cd3f3.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nv.q..ma Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5hz.bnsl Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
t.yo7veh Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
98yyd84o Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
p.fv10vb Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ