Static task
static1
Behavioral task
behavioral1
Sample
41b70e6ff231df64ec11d842903e8836d13b96a4792be88a91030b14fd1807b0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
41b70e6ff231df64ec11d842903e8836d13b96a4792be88a91030b14fd1807b0.exe
Resource
win10v2004-20221111-en
General
-
Target
41b70e6ff231df64ec11d842903e8836d13b96a4792be88a91030b14fd1807b0
-
Size
23KB
-
MD5
ed120cf357875f59dc09483a7c022e85
-
SHA1
1107c6376d19d3badba72c65ca19b69f323d9e41
-
SHA256
41b70e6ff231df64ec11d842903e8836d13b96a4792be88a91030b14fd1807b0
-
SHA512
79e0f6adccb71d1038a0b01205550e55a9e946b1fed9589668afba940508b90c257df6817e04e19f63d9dae0a59e02215dab59e7b76b142d15b5171d6d9fdf2d
-
SSDEEP
192:t5hL3VrCgYdTIczq2UP+atcen5kBaIMSkAP6ObhFoXsAWnOqyVB2I59ZiIFNo:t5hL3VFw05kBdhP6IhEWOgI59ZiI
Malware Config
Signatures
Files
-
41b70e6ff231df64ec11d842903e8836d13b96a4792be88a91030b14fd1807b0.exe windows x86
e0f67c5e5dd806e0bd2ecd095ffa35f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord553
ord858
ord544
ord419
ord476
ord849
ord864
ord765
ord362
ord793
ord509
ord513
ord822
ord397
ord441
ord329
ord248
ord307
ord346
ord657
ord784
ord395
ord304
ord511
ord795
ord305
ord364
ord811
ord318
ord312
ord406
ord722
ord377
ord443
ord512
user32
ord498
ord249
ord536
ord670
ord321
gdi32
ord250
comctl32
ord84
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ