Static task
static1
Behavioral task
behavioral1
Sample
9913929e22d0440262f739e524a1fada4f20d1898af0be6cda094b393f0fa8bd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9913929e22d0440262f739e524a1fada4f20d1898af0be6cda094b393f0fa8bd.exe
Resource
win10v2004-20221111-en
General
-
Target
9913929e22d0440262f739e524a1fada4f20d1898af0be6cda094b393f0fa8bd
-
Size
376KB
-
MD5
491788f9bdba85785cc7a42050fca728
-
SHA1
b51caa56ca6fa897549f2d1dc773f11ef76336f2
-
SHA256
9913929e22d0440262f739e524a1fada4f20d1898af0be6cda094b393f0fa8bd
-
SHA512
eea03cd081e21c7bd3937d0cea8b422dbceb9d478e192e5b31d1c47e00ff044dc79543ee3bf28aa0c3869bd9003edf3c67e9aa4ae70c9bd7b4b84b1095b56e7b
-
SSDEEP
6144:H+5GmBCFhf+oKwdd2PbNyrXni9ono/CRNbN3Z0KSkxF4m/lox+iBthd0p6ezgbKf:H6RBCFh2bwddqyJo/eNp0KS0T//Ybd0o
Malware Config
Signatures
Files
-
9913929e22d0440262f739e524a1fada4f20d1898af0be6cda094b393f0fa8bd.exe windows x86
d138b4428074a69c52cd454d3426b9ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
CODE Size: 15KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE