Static task
static1
Behavioral task
behavioral1
Sample
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe
Resource
win10v2004-20221111-en
General
-
Target
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979
-
Size
72KB
-
MD5
d3841b0a658b70194f73b0ba105f792f
-
SHA1
b3da74cc0190df5e6f19ac21fe662b3dcbd8eed3
-
SHA256
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979
-
SHA512
3a29cf73fb068c33052d93762ac307432a52767998c730107fbe883134f9c4b008dc1fb5db821a6749e72bb20056ef8fb9045516957755aca2a3edfa8d8a599d
-
SSDEEP
1536:ZUFQfEcm/El8Vq1wLf/fyud+Li3f1zwQVgvmA:Zkp8aqMnfymIiv1zwLvmA
Malware Config
Signatures
Files
-
ffd999c33a12042be01ae2626dcf272537820c93c42e519285abd17981833979.exe windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE