Static task
static1
Behavioral task
behavioral1
Sample
79e8856d9e97fdffe87f0f100aba7525818b25e8bc5fc94a424d923ddfe2180b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
79e8856d9e97fdffe87f0f100aba7525818b25e8bc5fc94a424d923ddfe2180b.exe
Resource
win10v2004-20220812-en
General
-
Target
79e8856d9e97fdffe87f0f100aba7525818b25e8bc5fc94a424d923ddfe2180b
-
Size
85KB
-
MD5
d50ecd4d6cf7a92abaf347fb3d1fe08d
-
SHA1
d18ddafdaf1dda9939438a7e46c3e35f91b95ee4
-
SHA256
79e8856d9e97fdffe87f0f100aba7525818b25e8bc5fc94a424d923ddfe2180b
-
SHA512
66d1eb104b0ffbd75b53e00b672b033359bfb123c12da1590c2c0e85ea3bad28142a620281f1e1ae10af005b268ca381ca1ddd50e47784efa0bb92e1b350b3eb
-
SSDEEP
1536:sndcJ/b4Zs8aJRxqwHS+YQoWpXI4WsnFsvglGbGuG+yVCgvOtTtuUr:sFy8aJ1gxWpYinv0b1yVzOtJuUr
Malware Config
Signatures
Files
-
79e8856d9e97fdffe87f0f100aba7525818b25e8bc5fc94a424d923ddfe2180b.exe windows x86
8224a5dcb45410abe7c9b4b4486398c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetProcAddress
LoadLibraryA
VirtualProtect
GetCurrentProcessId
LockResource
CreateFileA
LoadResource
FindResourceA
VirtualAlloc
VirtualFree
HeapFree
GetProcessHeap
VirtualProtectEx
VirtualAllocEx
GetCurrentProcess
ExitProcess
SetEvent
GetModuleHandleA
ExitThread
HeapAlloc
InterlockedExchange
RtlUnwind
VirtualQuery
ole32
CoCreateInstance
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ