Static task
static1
Behavioral task
behavioral1
Sample
d26510de6664d7870a237898d6ad7483b2f40298c080d90b83ea2355b0879901.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d26510de6664d7870a237898d6ad7483b2f40298c080d90b83ea2355b0879901.exe
Resource
win10v2004-20221111-en
General
-
Target
d26510de6664d7870a237898d6ad7483b2f40298c080d90b83ea2355b0879901
-
Size
119KB
-
MD5
7ba8d4599434188b4848259f8c747219
-
SHA1
cb8190b3aa07b740a5b29dbca749945ce01e30be
-
SHA256
d26510de6664d7870a237898d6ad7483b2f40298c080d90b83ea2355b0879901
-
SHA512
23e95f600278479cd72cd00095a2237fca351a4e32826141da264a84084507dcbd2f1b808629f864783a650bb17c4a93c40b8125d2c023df3a43bafc6429e63e
-
SSDEEP
3072:UdCErS+ckCZ9wcqol5l1VcTbbNL1X96lX5ahC8vwMohzjW:CCEWP1hbLV+bZL1X96lX5fMoJy
Malware Config
Signatures
Files
-
d26510de6664d7870a237898d6ad7483b2f40298c080d90b83ea2355b0879901.exe windows x86
1744d6533e8095e9a82a9282a45d146d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??_Ebad_cast@@UAEPAXI@Z
??_7bad_typeid@@6B@
??_Gexception@@UAEPAXI@Z
?_query_new_mode@@YAHXZ
kernel32
CreateRemoteThread
ntdll
LdrAlternateResourcesEnabled
LdrLockLoaderLock
LdrShutdownProcess
LdrAddRefDll
Sections
.text Size: 52KB - Virtual size: 91KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 47KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE