Static task
static1
Behavioral task
behavioral1
Sample
2389710f4853b4932cfcf22bb0f8672d5dcc08ca16446339fea5d6879c378a2b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2389710f4853b4932cfcf22bb0f8672d5dcc08ca16446339fea5d6879c378a2b.exe
Resource
win10v2004-20221111-en
General
-
Target
2389710f4853b4932cfcf22bb0f8672d5dcc08ca16446339fea5d6879c378a2b
-
Size
116KB
-
MD5
ea672b13ae3c03525fd59fb0303c606d
-
SHA1
7849817e1231e0e473b5916c70f3b86584ea6a8c
-
SHA256
2389710f4853b4932cfcf22bb0f8672d5dcc08ca16446339fea5d6879c378a2b
-
SHA512
f84305d26936700a75b7325fcf2e74b70ad67f2ea921ddac7f4cd72a533f07b386f8528ef82f941653cb2476a7118182fe1a7d9ed6ac95338c0b9c42949f5590
-
SSDEEP
1536:tG72liigDfmi3WDHHkrhGkYyXMS3pWZWTXCBe7PkfhWrgvr+Cn7:tm2liisJYkF5Wkz6fhGgvr37
Malware Config
Signatures
Files
-
2389710f4853b4932cfcf22bb0f8672d5dcc08ca16446339fea5d6879c378a2b.exe windows x86
e384b7387a322776092096d651f28fa1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetVersion
GetCommandLineW
VirtualFree
Sleep
ExitProcess
user32
GetMessagePos
CharNextA
Sections
.text Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Rvrmohpi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Eiwsjr S Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cslfjeby Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 277B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE