Static task
static1
Behavioral task
behavioral1
Sample
5c56ffbedf7c1a272bdc2c932e5b775d02bb2b7a3debacf6101a36b035b5b461.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c56ffbedf7c1a272bdc2c932e5b775d02bb2b7a3debacf6101a36b035b5b461.exe
Resource
win10v2004-20221111-en
General
-
Target
5c56ffbedf7c1a272bdc2c932e5b775d02bb2b7a3debacf6101a36b035b5b461
-
Size
163KB
-
MD5
15b9a527a8a23fc72d2308d03050e0d0
-
SHA1
9c091d090429eb138195fe3c5b8ab24cc74cc3f2
-
SHA256
5c56ffbedf7c1a272bdc2c932e5b775d02bb2b7a3debacf6101a36b035b5b461
-
SHA512
f5692471a41d506b42520b832d0847efcd3f6d80f442ce8fc7232c921c7353be6c5ec49720ff6d53afbbb7e8dd6dc78f616e9aea89115f8af7b75b3a96dd73b7
-
SSDEEP
3072:PTujamYF3ajDvmZ/JWhGHuFxDIAh3RS13bKhfRPX/PIt:PRKWZkjxDI2RS13boRW
Malware Config
Signatures
Files
-
5c56ffbedf7c1a272bdc2c932e5b775d02bb2b7a3debacf6101a36b035b5b461.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE