Static task
static1
Behavioral task
behavioral1
Sample
af138ee98217e5cf3e970f36319466866ad0019b9e0fd0b3796603bfde14c074.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af138ee98217e5cf3e970f36319466866ad0019b9e0fd0b3796603bfde14c074.exe
Resource
win10v2004-20221111-en
General
-
Target
af138ee98217e5cf3e970f36319466866ad0019b9e0fd0b3796603bfde14c074
-
Size
311KB
-
MD5
15de51127cbdc4f54bd9bc128a49a590
-
SHA1
b58c95b2257c299fd33db8e4a1d7b16b8444bc61
-
SHA256
af138ee98217e5cf3e970f36319466866ad0019b9e0fd0b3796603bfde14c074
-
SHA512
a983e0aed7b8829713448ec8abb0e92fe3263b1414f3f1ae4a5d188bc75e6b8a97d9923894c7728fe48c582ef97052a541f5a12ea6965c79fb680897843277fd
-
SSDEEP
6144:h6Htzcsot91yz2cwRHXxWPx1qBrDAlP0MqjXtMGXkSkVpt2Ex9Plr:hMtotyoHXxWPxIBrS6aSS9xVlr
Malware Config
Signatures
Files
-
af138ee98217e5cf3e970f36319466866ad0019b9e0fd0b3796603bfde14c074.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 305KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE