Static task
static1
Behavioral task
behavioral1
Sample
644d993b7106a5b47f4e1fb4af6f2dc127bc07b22c77cb2dc20c23fb25d544f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
644d993b7106a5b47f4e1fb4af6f2dc127bc07b22c77cb2dc20c23fb25d544f7.exe
Resource
win10v2004-20221111-en
General
-
Target
644d993b7106a5b47f4e1fb4af6f2dc127bc07b22c77cb2dc20c23fb25d544f7
-
Size
196KB
-
MD5
0ce186213083fcbee0529c4046eca4d0
-
SHA1
003908a8722766d6469dda679bc250879f2bb9f5
-
SHA256
644d993b7106a5b47f4e1fb4af6f2dc127bc07b22c77cb2dc20c23fb25d544f7
-
SHA512
0d58a17f76f638fca961f65455913a2fda32faee0ac4f94df3667efe797594dca39ad49050e69cf5a5c4357f13d6516d068ab2973a642b8a49364718631baf98
-
SSDEEP
3072:CX0NrWOZdCRhCc4TDwvC79AyjPyk6gQrp9Ki9gkwmOJltZrpRSMpb:U8J/SMCIyGQb9gkwmKthpQ
Malware Config
Signatures
Files
-
644d993b7106a5b47f4e1fb4af6f2dc127bc07b22c77cb2dc20c23fb25d544f7.exe windows x86
5bb733a417b36631293ba0ca2e4f7358
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
IsBadCodePtr
ExitThread
CompareStringA
user32
IsCharAlphaA
advapi32
IsTextUnicode
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ