Static task
static1
Behavioral task
behavioral1
Sample
ce70b5e4dc1e8332518ec30e3b79ae4de757038b73798cfff8e2d88f83876f8a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce70b5e4dc1e8332518ec30e3b79ae4de757038b73798cfff8e2d88f83876f8a.exe
Resource
win10v2004-20221111-en
General
-
Target
ce70b5e4dc1e8332518ec30e3b79ae4de757038b73798cfff8e2d88f83876f8a
-
Size
211KB
-
MD5
c9f2a6618c11fbf02583d4bec870bba3
-
SHA1
e4eb48d0c65455e5a79d453e56fabd9da9a8a883
-
SHA256
ce70b5e4dc1e8332518ec30e3b79ae4de757038b73798cfff8e2d88f83876f8a
-
SHA512
365727c80a4e9441e9f160dfbd01682a58bdc7c78c9e60bf85ffcd7525a05138274bef25ec8536f43546b5abe97a86c9aa7eb6ae944ffcac1966bad958349088
-
SSDEEP
6144:jEg+8DD+mcoHDSOji52DhGHaVkxa69sydvp:jE+mmcCSOSHaVQ9ssp
Malware Config
Signatures
Files
-
ce70b5e4dc1e8332518ec30e3b79ae4de757038b73798cfff8e2d88f83876f8a.exe windows x86
bdecea22e3e7b08d18b40d500d318c5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentProcess
GetModuleHandleW
GetCurrentThread
VirtualFree
WriteFile
Sleep
ExitThread
VirtualAlloc
IsWow64Process
user32
MessageBoxA
GetGuiResources
Sections
.text Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ