Static task
static1
Behavioral task
behavioral1
Sample
891a71cfd8420e114a2dc83d65e3bf5de5ffb3a387ba48e4bd33adaf9a7c910a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
891a71cfd8420e114a2dc83d65e3bf5de5ffb3a387ba48e4bd33adaf9a7c910a.exe
Resource
win10v2004-20221111-en
General
-
Target
891a71cfd8420e114a2dc83d65e3bf5de5ffb3a387ba48e4bd33adaf9a7c910a
-
Size
1.2MB
-
MD5
da1e4269469d50a95b25a72d601c8d8c
-
SHA1
1d9112787c0d8e5aeae828eb33d76bf4a65d6a5b
-
SHA256
891a71cfd8420e114a2dc83d65e3bf5de5ffb3a387ba48e4bd33adaf9a7c910a
-
SHA512
37dabb1a8979e6d635c0a38bafc0f35848b262725d6fa1f9caf6fd94f1e14469a97f10433abcb193894bd247f5580c04a9f763fbacfb91f8c43b99cee7a65e1a
-
SSDEEP
24576:/lgWc++sV/McuoDQG7c5sSQyry0gHotWANZpNxF3mCdIMsVOf9:NiTsVMlq0sWOQWijW/m9
Malware Config
Signatures
Files
-
891a71cfd8420e114a2dc83d65e3bf5de5ffb3a387ba48e4bd33adaf9a7c910a.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 396KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aesrduva Size: 800KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wtzcxyxa Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE