Static task
static1
Behavioral task
behavioral1
Sample
c596e4449db6bba3054b346487b18fb984bbffb712751eccfffd56ffa24b47bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c596e4449db6bba3054b346487b18fb984bbffb712751eccfffd56ffa24b47bd.exe
Resource
win10v2004-20220812-en
General
-
Target
c596e4449db6bba3054b346487b18fb984bbffb712751eccfffd56ffa24b47bd
-
Size
13KB
-
MD5
bf81b14ab791cbadd6999eec69b9d259
-
SHA1
980e187d5e64dbf9eb207916aa3365f4b4054fd6
-
SHA256
c596e4449db6bba3054b346487b18fb984bbffb712751eccfffd56ffa24b47bd
-
SHA512
d029c58ab3a01e932b0debf2aff1a0dadda9aa0b2f0795089a3fb3cceebb197ca8e4c37f62fda316c9a17364878d1e41b0d368d8b1ba20cd4df465ba4f50aa10
-
SSDEEP
192:nEIlgn1IeV5uUuArTiHKBWDkJBGNJE1LYZf0l6DaYtoPWmszg5tQ:Flgn1I4uPAr6KBWAJYAYOl6rouDma
Malware Config
Signatures
Files
-
c596e4449db6bba3054b346487b18fb984bbffb712751eccfffd56ffa24b47bd.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE