Static task
static1
Behavioral task
behavioral1
Sample
bd797f6fff344d95361badfb344ca56914870f06c042df5e65646d3c5bfbc13b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bd797f6fff344d95361badfb344ca56914870f06c042df5e65646d3c5bfbc13b.exe
Resource
win10v2004-20220812-en
General
-
Target
bd797f6fff344d95361badfb344ca56914870f06c042df5e65646d3c5bfbc13b
-
Size
1.3MB
-
MD5
949696a9a17321241a089a0fe6a21b63
-
SHA1
2ce6ba4e80f991cf03618dabd4a1342b5e7f4181
-
SHA256
bd797f6fff344d95361badfb344ca56914870f06c042df5e65646d3c5bfbc13b
-
SHA512
4621d6f03977ed8ec275797eaafda184e9d777bc5bd6248525733dea685e00126615c5b6d3e2f64ec8ef75142147f4e80cceab6c09ab5cd91fc2362d6ce548e0
-
SSDEEP
1536:bXTSHQ+AWwXpPhttIf1zwQVgv/6iGabKuuSA:bjG4pPhLI1zwLv/6iGaWuuSA
Malware Config
Signatures
Files
-
bd797f6fff344d95361badfb344ca56914870f06c042df5e65646d3c5bfbc13b.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE