Static task
static1
Behavioral task
behavioral1
Sample
04dcf9abfda8ec71568796216036dedac02d3e98531a70e089b05e030af1fae7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
04dcf9abfda8ec71568796216036dedac02d3e98531a70e089b05e030af1fae7.exe
Resource
win10v2004-20221111-en
General
-
Target
04dcf9abfda8ec71568796216036dedac02d3e98531a70e089b05e030af1fae7
-
Size
38KB
-
MD5
5c562d1687f6c8bec635c79516dc46b0
-
SHA1
46c063902191f87129420fc59434e100b1618eb6
-
SHA256
04dcf9abfda8ec71568796216036dedac02d3e98531a70e089b05e030af1fae7
-
SHA512
e143ee9cf05ba522f5220a363ed77664a8815f91a12d014f332d945553d9745ead51b854aaefd5f44bf31c8347b419feaba62195b2a7efc43d90392f14b06932
-
SSDEEP
768:zn3ZTZaMKHOcgfThJlKK0gob24ODM27dMxoD0l8r11c:zpkMKFgQK0gH4O4odRD0M1W
Malware Config
Signatures
Files
-
04dcf9abfda8ec71568796216036dedac02d3e98531a70e089b05e030af1fae7.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 28KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE