Static task
static1
Behavioral task
behavioral1
Sample
9aa8e3d4a16d4cea0fdc0f5d62979f9c12557444f58e635b990e4ef789c2214c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9aa8e3d4a16d4cea0fdc0f5d62979f9c12557444f58e635b990e4ef789c2214c.exe
Resource
win10v2004-20221111-en
General
-
Target
9aa8e3d4a16d4cea0fdc0f5d62979f9c12557444f58e635b990e4ef789c2214c
-
Size
39KB
-
MD5
dc8d3d9f7b817ec30d737f35f5228c4a
-
SHA1
65a684d6fa40a544c5c1de73ac7176648ae53882
-
SHA256
9aa8e3d4a16d4cea0fdc0f5d62979f9c12557444f58e635b990e4ef789c2214c
-
SHA512
5e5e1bd09424b529f65916b0ba19090aa08f0fff617c2e5e76b59de155400649d2bfd3adef2938f6d5bb2cedbc2f1b29e05c1ab79bce0478388f008141ccff6d
-
SSDEEP
768:VADMvEJWeJh2QQnRTwgfRLs/CT5cz5otMXYY/XxU2ki5ABiDq:VAaEJWChzQntwgJLIh/XxUBie
Malware Config
Signatures
Files
-
9aa8e3d4a16d4cea0fdc0f5d62979f9c12557444f58e635b990e4ef789c2214c.exe windows x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 188KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE